Robuta

https://mailarchive.ietf.org/arch/msg/cfrg/4vDWq9voxkAtobsUSvThWXbVtOo/ Re: [Cfrg] [TLS] Data limit to achieve Indifferentiability for ciphertext with TLS 1.3 GCM, and the... Search IETF mail list archives https://csrc.nist.gov/pubs/journal/2016/04/indifferentiability-security-of-the-fast-widepipe/final Indifferentiability Security of the Fast Widepipe Hash: Breaking the Birthday Barrier | CSRC of the security fast