1
$\begingroup$

Is it safe to use ChaCha20Poly1305 with empty AAD? I tried to implement E2E encryption between two clients in network.

$\endgroup$

migrated from security.stackexchange.com Jun 28 at 13:22

This question came from our site for information security professionals.

1
$\begingroup$

Yes, it is safe. AAD (Additional Authenticated Data) is optional. It's available for you to use when you have data you want authenticated (integrity checked) but do no wish to encrypt. In general, in fact, it's far more common to use AEAD algorithms with only encrypted data and no AAD.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy