View tag derivation after KEM
Named by 2 kept items in this workspace.
Search every workspace for View tag derivation after KEM. It matches the name as written, so it can find other things that share it.
The items that name it 2
View tag is derived from a domain-separated SHA-256 digest of ss computed after the KEM step, specifically so a quantum adversary cannot use an ECDH-only-derived tag to rule out most candidate recipients.
Defensive technique: computing the view tag from a digest that depends on the post-quantum shared secret, not just the ECDH secret, so a quantum adversary cannot use the tag alone to rule out most candidate recipients
All techniques in this workspace.