aboutsummaryrefslogtreecommitdiff
path: root/draft-schanzen-gns.xml
diff options
context:
space:
mode:
Diffstat (limited to 'draft-schanzen-gns.xml')
-rw-r--r--draft-schanzen-gns.xml7
1 files changed, 4 insertions, 3 deletions
diff --git a/draft-schanzen-gns.xml b/draft-schanzen-gns.xml
index 523cec3..b439b7b 100644
--- a/draft-schanzen-gns.xml
+++ b/draft-schanzen-gns.xml
@@ -727,13 +727,14 @@ SB == R + SHA512(R, zk', M) * A'
727 </t> 727 </t>
728 <artwork name="" type="" align="left" alt=""><![CDATA[ 728 <artwork name="" type="" align="left" alt=""><![CDATA[
729RDATA := GCM-AES-256(K, IV, BDATA) 729RDATA := GCM-AES-256(K, IV, BDATA)
730BDATA := C|T = GCM-AES-256(K, IV, RDATA) 730BDATA := GCM-AES-256(K, IV, RDATA) = CIPHERTEXT | GCM_TAG
731 ]]></artwork> 731 ]]></artwork>
732 <t> 732 <t>
733 The result of the GCM encryption function is the encrypted 733 The result of the GCM encryption function is the encrypted
734 ciphertext "C" concatenated with the GCM authentication tag "T". 734 ciphertext concatenated with the 128-bit GCM authentication
735 tag "GCM_TAG".
735 Accordingly, the length of BDATA equals the length of the 736 Accordingly, the length of BDATA equals the length of the
736 RDATA plus the length of the GCM authentication tag. 737 RDATA plus the 16 octets of the authentication tag.
737 </t> 738 </t>
738 <t> 739 <t>
739 The key "K" and counter "IV" are derived from 740 The key "K" and counter "IV" are derived from