Top all-time · #20650
frereit's blog
Personal blog · frereit.desecurityprogramming
frereit's blog is a personal blog at frereit.de about security and programming. Since 2024, 3 different Hacker News readers have linked it 3 times, most often “AES-GCM and breaking it on nonce reuse”. It is still writing: the last post was on 2026-07-04, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
A post on the XAES-256-GCM extended-nonce AEAD construction, which aims to avoid the catastrophic failure that AES-GCM suffers when a nonce is reused. HN readers link it in cryptography threads.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Personal blog about computer science, cyber security and anything else that I find interesting.
Most-linked posts?
- AES-GCM and breaking it on nonce reuse3 people · 3 mentions · first linked 2024-06-09
What Hacker News says?
Not a crypto guy. So would the high-level summary be something like this? Standard AES-GCM AEAD will catastrophically fail if you use the same nonce twice[1] for different messages, and the size of the size of the nonce is small enough that one cannot safely use a random nonce in many cases. This work provides an easy to use way to avoid that. It does so by changing not just the nonce but also the key used per messa…
Comment linking /aes_gcm/
on “The XAES-256-GCM extended-nonce AEAD”Submitted AES-GCM and breaking it on nonce reuse as a story · 141 points
HN discussionSubmitted AES-GCM and breaking it on nonce reuse as a story · 5 points
HN discussion