From 5826d7f231c60a65c62d456b1f1e5190b4c56a597240dbfc55a1bfd498e68c9f Mon Sep 17 00:00:00 2001 From: Sergey Matveev Date: Mon, 21 Apr 2025 18:41:40 +0300 Subject: [PATCH] Note about MACs ordering --- spec/cm/dem-xchapoly-krmr.texi | 2 ++ 1 file changed, 2 insertions(+) diff --git a/spec/cm/dem-xchapoly-krmr.texi b/spec/cm/dem-xchapoly-krmr.texi index 989a5d3..f812648 100644 --- a/spec/cm/dem-xchapoly-krmr.texi +++ b/spec/cm/dem-xchapoly-krmr.texi @@ -27,6 +27,8 @@ randomised 192-bit nonce (initialisation vector) are derived from it. Nonce's lowest bit is set only if this is the last chunk we encrypting. +MACs are ordered the same way as KEMs in the list. + @code{/payload}'s chunk length equals to 128KiB+16+32*recipients bytes. HKDF is KDF algorithm, -- 2.48.1