Re: GCM mode and GMAC

On 02/07/2011 12:21 PM, Niels Möller wrote:

...

I would like less of the internals of gcm exposed to the user rather than more. As a user of nettle I wouldn't even want to know that there is a hash subkey on gcm.

In any case we should probably have a gcm_aes interface (and whatever other variants are relevant) that is easier to use than the lowest level gcm interface.

Could be... Another thing. I've implicitly used gcm_set_iv() as a way to reset the GCM mode. Unfortunately it is not enough. The auth_size and data_size have to be set to zero as well. Do you think that should be done in the set_iv function as well?

I've currently done that in gnutls, and with that change gnutls talks GCM with others servers.

regards, Nikos