tsec-cipher-jca/tsec.cipher.symmetric.jca/AESCTR

AESCTR

tsec.cipher.symmetric.jca.AESCTR

sealed abstract class AESCTR[A] extends JCACipherAPI[A, CTR, NoPadding], AES[A]

Attributes

Source: AESCTR.scala
Graph
Supertypes: trait AES[A]

trait AEADCipher[A]

trait AECipher[A]

trait BlockCipher[A]

trait Cipher[A]

trait JCACipherAPI[A, CTR, NoPadding]

trait CipherAPI[A, SecretKey]

class Object

trait Matchable

class Any
Show all
Known subtypes: object AES128CTR.type

object AES192CTR.type

object AES256CTR.type

Members list

Value members

Concrete methods

Attributes

Source: AESCTR.scala

Our default Iv strategy for CTR mode produces randomized IVs

Attributes

Source: AESCTR.scala

An incremental iv generator, intended for use with a single key.

See: https://crypto.stanford.edu/~dabo/cs255/lectures/PRP-PRF.pdf, courtesy of dan boneh

For a 128 bit iv, we use a 64 bit leftmost bits as a nonce, and the rightmost 64 bits (zeroed out) as the counter.

This means, using the incremental strategy, you can safely generate generate 264 - 106 different nonces maximum, each of which can safely increment a maximum of 2^^64 blocks.

264 - 106 is a safe limit to possibly avoid overflowing the safe number of nonces you can generate with one key.