[tor-dev] New revision: Proposal 295: Using ADL for relay cryptography (solving the crypto-tagging attack)

[Jeff Burdges]

If I understand, proposal 295 looks similar to either BEAR or LION from the LIONNESS.  I vaguely recall both BEAR and LION being "broken" in some setting, although I cannot site the paper.  Anyone?

I suppose the BEAR and LION break originates from using them for authentication while proposal 295’s separate SVer function fixes this?

Jeff



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: <http://lists.torproject.org/pipermail/tor-dev/attachments/20190408/bb821238/attachment.sig>