1
$\begingroup$

ChaCha20 along with Poly1305 provides confidentiality and integrity. Now suppose I cascade AES on top of ChaCha20. Is it safe to assume that the Poly1305 MAC is still secure, even if I cascade multiple ciphers? In other words, is one MAC enough to secure both ChaCha20 and AES?

Problem solved: Is Poly1305 an information-theoretically secure MAC?

$\endgroup$
3
  • 1
    $\begingroup$ Related: crypto.stackexchange.com/q/48416/54184. But basically yes. $\endgroup$ – forest Feb 24 at 2:39
  • $\begingroup$ Perfect explanation. Question solved. I'll add the link to my question. $\endgroup$ – HACKERALERT Feb 24 at 3:14
  • $\begingroup$ Here I marked it as a duplicate for you so you can accept the duplicate link. $\endgroup$ – forest Feb 24 at 3:25