<![CDATA[wolfSSL - Embedded SSL Library — wc_AesGcmEncrypt/Decrypt nonce/iv size]]> https://www.wolfssl.com/forums/topic1744-wcaesgcmencryptdecrypt-nonceiv-size.html Wed, 12 May 2021 17:20:24 +0000 PunBB <![CDATA[Re: wc_AesGcmEncrypt/Decrypt nonce/iv size]]> https://www.wolfssl.com/forums/post6023.html#p6023 Hi miennaco,

The AES GCM IV is normally 12-bytes, but it supports any length. An IV size not equal to 12-byte will first be GHASH'd then used.

See the code here:
https://github.com/wolfSSL/wolfssl/blob … es.c#L7180

Thanks,
David Garske, wolfSSL

]]> Wed, 12 May 2021 17:20:24 +0000 https://www.wolfssl.com/forums/post6023.html#p6023 <![CDATA[wc_AesGcmEncrypt/Decrypt nonce/iv size]]> https://www.wolfssl.com/forums/post6018.html#p6018 What are the effective limits of the IV size for these calls?
We intend to use a 128bit (16 byte) IV, will all of the bits be used?

]]> Wed, 12 May 2021 00:05:20 +0000 https://www.wolfssl.com/forums/post6018.html#p6018