Therefore, AEAD∗ is not misuse-resistant in any security setting. This is not the case in the nonce-respecting setting, and it thus remains X secure.
確定! 回上一頁