Hal Finney | 5 Jul 2005 22:37

Re: Attempt to implement poly1305-aes in integers

Sorry, I wrote some of those values incorrectly.  For clarity, it
should be:

> The message m gets padded as 0x100, and the key is
> 0x0f0e0d0c0b0a09080706050403020100.  When multiplied together we get
> 0x0f0e0d0c0b0a0908070605040302010000.  Taking this mod
> 0x03fffffffffffffffffffffffffffffffb gives
> 0x030e0d0c0b0a090807060504030201000f, and the low 128 bits of this are
> what my library is outputting (when you allow for the print format).

Hal


Gmane