> On 14 Feb 2017, at 23:52, Atul Luykx <atul.lu...@esat.kuleuven.be> wrote:
>
>> Why is that 2^48 input blocks rather than 2^34.5 input blocks?
> Because he wants to lower the security level. The original text recommends
> switching at 2^{34.5} input blocks, corresponding to a success probability of
> 2^{-60}, whereas his text recommends switching at 2^{48} blocks,
> corresponding to a success probability of 2^{-32}.OK, missed that. So I’m in favor of switching the phrasing to be about blocks rather than maximum-sized records, but not in favor of lowering the security level. Yoav
signature.asc
Description: Message signed with OpenPGP
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls
