Skip to content
This repository was archived by the owner on Nov 9, 2017. It is now read-only.
This repository was archived by the owner on Nov 9, 2017. It is now read-only.

Clearly document which XChaCha20-Poly1305 construction is being used #4

@briansmith

Description

@briansmith

I am considering adding XChaCha20-Poly1305 to the library I maintain, which only supports the IETF construct with 96-bit nonces and where the AAD and ciphertext is padded to 16 bytes with zeros. I'm doing a survey of other libraries to see if they would interop with my implementation or not, and it isn't clear from just reading the documentation which construct (the DJBian construct with 64-bit nonces, or the IETF construct) this library supports for XChaCha20-Poly1305.

See jedisct1/libsodium#461, in particular the crypto_aead_xchacha20poly1305_ietf_{decrypt,encrypt}[_detached] functions. For some more context with respect to what libsodium has decided to do (support both constructs), see jedisct1/libsodium#462. FWIW, I'm only planning to support the IETF construct.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions