News for hackers. Stuff that matters.

A comment on Announcing TripleSec - JavaScript encryption combining Salsa20, AES, and 2fish. Parent comment

Re:Announcing TripleSec - JavaScript encryption combining Sa... by tptacek on Tuesday September 17, 2013 @03:45PM (#6401451)
Hi, Max. CTR doesn't have an IV. It has a nonce. IVs need to be unpredictable; nonces only need to not repeat.
[ Parent | on HN ]
Re:Announcing TripleSec - JavaScript encryption combining Sa... by 0xEA on Tuesday September 17, 2013 @05:23PM (#6402039)
Actually, you rarely want a predictable nonce as well. The difference is that a nonce must not repeat (or repetition is statistically irrelevant).

Even per wikipedia, many often refer to an IV as a nonce: http://en.wikipedia.org/wiki/Cryptographic_nonce

[ Parent | on HN ]
Re:Announcing TripleSec - JavaScript encryption combining Sa... by sdevlin on Tuesday September 17, 2013 @06:12PM (#6402268)
What problem does a predictable nonce cause?
[ Parent | on HN ]
Re:Announcing TripleSec - JavaScript encryption combining Sa... by maxtaco on Tuesday September 17, 2013 @04:45PM (#6401844)
It scares me to use something other than something random here because any scheme to remember which nonces you've used before seems bug-prone and vulnerable. As for whether it's called a nonce or IV, I've seen it written as both and IV is 3 characters shorter :)
[ Parent | on HN ]
Re:Announcing TripleSec - JavaScript encryption combining Sa... by tptacek on Tuesday September 17, 2013 @04:53PM (#6401893)
Nonces and IVs aren't the same thing. IV is not a shorter way to write "nonce".
[ Parent | on HN ]