News for hackers. Stuff that matters.
Re:Announcing TripleSec - JavaScript encryption combining Sa... by maxtaco on Tuesday September 17, 2013 @04:45PM (#6401844)
It scares me to use something other than something random here because any scheme to remember which nonces you've used before seems bug-prone and vulnerable. As for whether it's called a nonce or IV, I've seen it written as both and IV is 3 characters shorter :)
Re:Announcing TripleSec - JavaScript encryption combining Sa... by tptacek on Tuesday September 17, 2013 @04:53PM (#6401893)
Nonces and IVs aren't the same thing. IV is not a shorter way to write "nonce".