Approved_users, bureaucrat, administrator
1,956
edits
Changes
→AES-CCM Overview
[[File:cbc_mac_source.png]]
The "Calculated Tag" and "Expected Tag" are compared together, and only if they match is the decrypted data used. A change of any of the data blocks OR the header would change the calculated tag, resulting in an error.
Some nice features of AES-CCM:
* Can decrypt any data block, or decrypt blocks out of orderdue to AES-CTR usage.
* Authentication Tag provides authentication that data has not been modified in transit.
* Auth tag can include non-encrypted information, such as a header with address or length information.