2 Commits

Author	SHA1	Message	Date
Miroslav Lichvar	5dd173c050	siv: add functions to return min and max nonce length ... While AES-SIV-CMAC allows nonces of any length, AES-GCM-SIV requires exactly 12 bytes, which is less than the unpadded minimum length of 16 used in the NTS authenticator field. These functions will be needed to support both ciphers in the NTS code.	2022-10-19 15:50:39 +02:00
Miroslav Lichvar	c5306bed39	siv: introduce API for SIV ... Add a header file for Synthetic Initialization Vector (SIV) cipher mode, which will be used by NTS.	2020-03-05 16:02:15 +01:00