Skip to content

Commit

Permalink
Add note about message commitment
Browse files Browse the repository at this point in the history
  • Loading branch information
@paragonie-security
paragonie-security committed Dec 3, 2020
1 parent 88615b7 commit e7adebc
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions doc/Primitives.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -9,3 +9,6 @@
* Password-Based Key Derivation: [**Argon2**](https://paragonie.com/book/pecl-libsodium/read/07-password-hashing.md#crypto-pwhash-str)

In all cases, we follow an Encrypt then MAC construction, thus avoiding the [cryptographic doom principle](https://moxie.org/2011/12/13/the-cryptographic-doom-principle.html).

As a consequence of our use of a keyed BLAKE2b hash as a MAC, instead of GCM/Poly1305,
Halite ciphertexts are [**message committing**](https://eprint.iacr.org/2020/1456) which makes ciphertexts random key robust.

0 comments on commit e7adebc

Please sign in to comment.