Replying to Avatar Ademan

If the HW device doesn't simply use the provided nonce as-is (seems undesirable due to sensitivity of nonces), can't the HW device still grind it's portion of the nonce to exfil?

It seems like an extra round of communication is unavoidable? (but likely worthwhile!)
Avatar
Matt Corallo 2y ago

Nope! The magic of XOR (or pre-committed EC points) is that neither gets a “part” but rather the full thing is random if either input is fully random.

Reply to this note

Please Login to reply.

Discussion

No replies yet.