Skip to main content
2 events
when toggle format what by license comment
Dec 13, 2015 at 3:37 comment added dave_thompson_085 GCM does not use MAC secrets. It and CCM are the only "AES stream" modes in SSL/TLS (at least to date) and both do use KDFed IVs which contribute part (but only part) of the AEAD nonces; these are identified as key material but as you say it's arguable if they are actually keys.l
Dec 8, 2015 at 9:31 history answered SilverlightFox CC BY-SA 3.0