Is it safe to store initial counter value for AES-CTR alongside with ciphertext? The initial counter value can actually be thought of as a sort of IV, which I assume is safe to transmit with the ciphertext, but I really want to be sure that this is indeed safe.
It is an IV and it is safe to transmit with the ciphertext (if it wasn't, we would call it a key).