Skip to content

Implement AES-GCM-SIV

Daiki Ueno requested to merge ueno/nettle:wip/dueno/aes-gcm-siv into master

This implements AES-GCM-SIV, described in RFC8452, on top of the existing AES-GCM primitives. In particular, its hash algorithm POLYVAL is implemented using the GHASH with additional byte order conversion according to RFC8452 Appendix A.

Signed-off-by: Daiki Ueno

Merge request reports