Eric & Herbert,

I noticed the testmgr fuzz tester generating (occasionally, see previous mail) 
tests cases with 
authsize=0 for the AEAD ciphers. I'm wondering if that is intentional. Or 
actually, I'm wondering
whether that should be considered a legal case.
To me, it doesn't seem to make a whole lot of sense to do *authenticated* 
encryption and then
effectively throw away the authentication result ... (it's just a waste of 
power and/or cycles)

The reason for this question is that supporting this requires some specific 
workaround in my 
driver (yet again). And yes, I'm aware of the fact that I can advertise I don't 
support zero length
authentication tags, but then probably/likely testmgr will punish me for that 
instead.

Regards,
Pascal van Leeuwen
Silicon IP Architect, Multi-Protocol Engines @ Verimatrix
www.insidesecure.com

Reply via email to