Question: In a Generic Authentication Architecture (GAA) utilizing OSCORE for secure communication, what is the mandatory AEAD algorithm implementation requirement?
Option 1: AES-GCM-16-64-128 with 256-bit key, 12-byte nonce, and 128-bit tag
Option 2: AES-CCM-16-64-128 with 128-bit key, 13-byte nonce, and 64-bit tag
Option 3: ChaCha20-Poly1305 with 256-bit key, 12-byte nonce, and 128-bit tag
Option 4: Camellia-CCM-16-64-128 with 128-bit key, 13-byte nonce, and 64-bit tag
Explanation: The correct answer is based on the specific requirements for OSCORE in the context of GAA. Here, AES-CCM-16-64-128 is mandated with precise parameters: a 128-bit key for security, a 13-byte nonce to ensure uniqueness and prevent replay attacks, and a 64-bit tag for integrity verification. This combination provides a balanced approach to securing communications within the Generic Authentication Architecture.