{"comment":{"url":"https://api.github.com/repos/tlswg/tls13-spec/comments/20353624","html_url":"https://github.com/tlswg/tls13-spec/commit/0661e137946fa17973f028ffa9ddad3fa54e1998#commitcomment-20353624","id":20353624,"user":{"login":"brainhub","id":8466779,"avatar_url":"https://avatars.githubusercontent.com/u/8466779?v=3","gravatar_id":"","url":"https://api.github.com/users/brainhub","html_url":"https://github.com/brainhub","followers_url":"https://api.github.com/users/brainhub/followers","following_url":"https://api.github.com/users/brainhub/following{/other_user}","gists_url":"https://api.github.com/users/brainhub/gists{/gist_id}","starred_url":"https://api.github.com/users/brainhub/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brainhub/subscriptions","organizations_url":"https://api.github.com/users/brainhub/orgs","repos_url":"https://api.github.com/users/brainhub/repos","events_url":"https://api.github.com/users/brainhub/events{/privacy}","received_events_url":"https://api.github.com/users/brainhub/received_events","type":"User","site_admin":false},"position":null,"line":null,"path":null,"commit_id":"0661e137946fa17973f028ffa9ddad3fa54e1998","created_at":"2017-01-04T00:44:33Z","updated_at":"2017-01-04T00:44:33Z","body":"- The bug remains: 2^48 * 16 = 2^62 bytes. This then affects other numbers. \r\n- Another remaining issue is \"tiny records\" < 16 bytes, i.e. TLS records with fewer than 16 bytes that will have partial AES-GCM block. \r\nA sanity check: Is x=1 allowed? If so, we are dealing with a 2-byte block cipher. The formula gives ~ 2^60 cipherblocks for 2^-32 probability of collision, which is inappropriate. I think this argument still needs work. IMO it should be removed in favor of straightforward text about counting in whole blocks. In any case, I think that the issue of \"tiny records\" should be handled separately from the block cipher data limits to remove confusion."}}
{"actor":{"display_login":"brainhub"}}