Lesson 5 of 9 · 25m

Nonce Reuse and the Ways AEAD Dies in Production

The forbidden attack: why one reused nonce in GCM leaks plaintext and forges tags — and the schemes that resist it.