s for including AD only in the
last few iterations of the draft. Why was AD an empty input, initially? Are
there any threads on the mailing list that I've missed?
Thank you very much.
Devi Prasad
Here's the reference for the text in drafts 24 and 25:
draft-ietf-tls-tls13-24, Februar
ndell (Third edition) present the authenticated-encryption
experiment, which I realised is what Shrimpton calls IND-CCA3. And that
triggered a few questions about TLS 1.3's choices.
Thanks again. I shall read the paper.
Regards
Devi Prasad
On Thu, 15 Aug, 2024, 21:59 Christopher Patton,
wr
