Skip to main content

XAES_256_GCM

Constant XAES_256_GCM 

Source
pub(crate) const XAES_256_GCM: i64 = -70010;
Expand description

XAES-256-GCM (https://c2sp.org/XAES-256-GCM) extended-nonce AEAD. Given an input key and 192-bit nonce, a counter-based KDF is instantiated with CMAC-AES256, the input key, and the first 96 bits of the input nonce. The derived key and last 96 bits of the input nonce are then used to encrypt with AES-256-GCM.