Re: SIV-CMAC

Looks good to me, but I'm adding Mirek in CC who is using SIV-AES-CMAC for NTS/NTP implementation to verify that the final code is sufficient for this implementation.

regards, Nikos

On Tue, Jul 2, 2019 at 4:25 PM Niels Möller nisse@lysator.liu.se wrote:

Nikos Mavrogiannopoulos n.mavrogiannopoulos@gmail.com writes:

...

I prefer the second option because I think the zero nonce variant requires a disproportionate, to its usefullness and use, discussion to define the "right" semantics.

Merged siv-mode to the master branch now. Does it look right to you?

Regards, /Niels

-- Niels Möller. PGP-encrypted email is preferred. Keyid 368C6677. Internet email is subject to wholesale government surveillance.