Re: Defaults issues with AES-GCM

On Wed, Apr 17, 2013 at 5:52 PM, Richard Barnes <rbarnes@bbn.com> wrote:
>
> Proposed revised AesGcmParams:
>
> dictionary AesGcmParams : AlgorithmParameters {
>   ...
>   // The desired length of the authentication tag. May be 0 - 128.
>   [EnforceRange] octet? tagLength = 128;

The comment should say "length in bits".

A tagLength of 0 should be disallowed. Perhaps "May be 32 - 128" or
"May be 64 - 128".

We probably should also restrict tagLength to be a multiple of 8.

Wan-Teh

Received on Thursday, 18 April 2013 02:02:40 UTC