Hacker News new | ask | show | jobs
by loup-vaillant 3445 days ago
But… Poly1305 has the same "problem"…
1 comments
tptacek 3445 days ago
Guttman's wording here is imprecise. GCM and Poly1305 are not comparably brittle. Both have nonce misuse issues, but GCM has additional problems. See:

https://news.ycombinator.com/item?id=13384762

link