Re: poly1305 nonce increments

On Tue, Nov 12, 2013 at 9:17 PM, Niels Möller nisse@lysator.liu.se wrote:

As I wrote, I'm working with poly1305. One question: The _digest function will update the nonce value, so that by default one gets a nonce sequence of 0, 1, 2, .... In the code I'm working with (contributed by Nikos), this increment is done in a big-endian fashion, just like increments for CTR mode. Is this going to be the common way to generate nonces for poly1305?

There is no common way as poly1305-aes isn't used in any standard (that I know) yet.

There is: draft-agl-tls-chacha20poly1305-03, but it uses a very different construction than the poly1305-aes.

regards, Nikos