Comment on Swift CryptoparentComments−cakoose6yAES-GCM-SIV takes a nonce; if you reuse a nonce with two identical plaintexts, you reveal that the plaintexts were identical, but not much more.With AES-GCM, if you reuse a nonce with two different plaintexts, you reveal the XOR of the two plaintexts!
Comments
AES-GCM-SIV takes a nonce; if you reuse a nonce with two identical plaintexts, you reveal that the plaintexts were identical, but not much more.
With AES-GCM, if you reuse a nonce with two different plaintexts, you reveal the XOR of the two plaintexts!