Encrypted Nonce Modes on Farfalle

ePrint Report: Encrypted Nonce Modes on Farfalle

Seth Hoffert

Nonces are a fact of life for achieving semantic security. Generating a uniformly random nonce can be costly and may not always be feasible. Using anything other than uniformly random bits can result in information leakage; e.g., a timestamp can deanonymize a communication and a counter can leak the quantity of transmitted messages. Ideally, we would like to be able to efficiently encrypt the nonce to 1) avoid needing uniformly random …

encrypted eprint report nonce