Skip to content

View tag derivation after KEM

Named by 2 kept items in this workspace.

Search every workspace for View tag derivation after KEM. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • thread2026-10-09

    View tag is derived from a domain-separated SHA-256 digest of ss computed after the KEM step, specifically so a quantum adversary cannot use an ECDH-only-derived tag to rule out most candidate recipients.

  • thread2026-10-09It is written here as View tag derivation after KEM (not from ECDH secret alone).

    Defensive technique: computing the view tag from a digest that depends on the post-quantum shared secret, not just the ECDH secret, so a quantum adversary cannot use the tag alone to rule out most candidate recipients

All techniques in this workspace.