News for hackers. Stuff that matters.
Re:The definitive guide to “modulo bias” and how to avoid it... by jstanley on Thursday September 15, 2022 @02:01PM (#32855989)
It seems like the general case answer is "no, using a larger nonce does not increase risk".

Otherwise an attacker could just imagine that instead of a 256-bit nonce, the nonce was actually 257 bits long but the first bit is always 0.

There are no comments on this comment yet.