v @avi.im · Oct 28

AEADs provide a verification tag after encryption. For each page, we need a nonce too. Both the nonce & the tag become metadata for an encrypted page So where do you store them? We could store them separately, but it's much better & neater to store them in the page itself (1/5)

3 likes 1 replies

?

Replies

v · Oct 28

Since we encrypt each page separately, we should use a different nonce for different pages. Even the same page, when encrypted again, should use a different nonce for better security™️ So during encryption, we generate a secure random nonce every time. (2/5)