Re: Proposal for doing unauthenticated encryption inside of HTTP/2

On 3 December 2013 11:24, Ilari Liusvaara <> wrote:
> 1) For some AEAD modes, decrypting the start of frame without knowing length might
> not be possible (albeit it seems to be possible for most common ones, like GCM
> and EAX, and maybe also OCB).
> 2) Pretty much no crypto library implements unauhenticated partial decryption of
> AEAD schemes.

That's a strong assertion, and I think wrong.  See the TLS 1.2 AEAD
modes.  The authenticated data includes length and some other things,
values that appear unencrypted.

Received on Tuesday, 3 December 2013 20:00:18 UTC