Ron Frederick ronf@timeheart.net writes:
Do any of the AEAD functions modify the nonce after it is set?
poly1305_aes_digest also increments the nonce. And it's in the same category as umac: A keyed hash with a per-message nonce. It seems the AEAD functions don't, so it's not entirely consistent.
Regards, /Niels