Questions tagged [xsalsa20]
XSalsa20 is a variant of the Salsa20 cipher with a longer nonce.
13
questions
5
votes
1answer
361 views
Understanding the impact of partitioning oracle attacks on stream ciphers
Yesterday I came across some conversation discussing partitioning oracle attacks, against authenticated stream ciphers like ChaCha20 and Salsa20 with poly1305 for MAC.
As I understand it (though the ...
1
vote
1answer
142 views
XSalsa20 + Poly1305 authentication wtihout tag
Do I understand correctly that XSalsa20 + Poly1305 provides authentication without a tag? If so, then how does that work?
I came to that conclusion by reading http://nacl.cr.yp.to/secretbox.html, &...
1
vote
1answer
173 views
Can we encrypt part of the XChaCha/XSalsa nonce?
The xChaCha cipher detailed here extends the nonce 192bits and works as follows (from the link):
Pass the key and the first 16 bytes of the 24-byte nonce to HChaCha20 to obtain the subkey.
Use the ...
0
votes
0answers
139 views
Secretbox- algorithm Poly1305 and cipher Xsalsa20
I use Rclone, which uses Secretbox to authenticate and encrypt data. Secretbox uses the Poly1305 authentication algorithm and the Xsalsa20 symmetric flow cipher. This whole process takes some time (...
2
votes
1answer
684 views
Composition of X25519+XSalsa20+Poly1305
In a correct implementation of X25519+XSalsa20+Poly1305, I think I have the right understanding in saying that the Poly1305 message authentication code is a ...
0
votes
1answer
315 views
Authenticated encryption using libsodium's crypto_box_curve25519xsalsa20poly1305
It seems that crypto_box_easy, generates a random nonce and appends it to the cipher text in libsodium.
I understand using the same nonce with the same key can be ...
1
vote
1answer
171 views
Is it OK to just hash a symmetric key to derive an authentication key?
I'm using xsalsa20poly1305 for encryption in my program from libsodium. The recommended size for chunks is 4 kB. In that case, poly1305 will have authentication only for the the individual 4k chunks. ...
7
votes
2answers
679 views
Is there an upper limit to plaintext size in XSalsa20Poly1305?
While fiddling with the NaCl implementation in Go, specifically SecretBox, a general crypto question came up after reading the documentation.
Quote:
Package secretbox encrypts and authenticates ...
2
votes
1answer
335 views
Bouncycastle and Salsa rounds
Salsa by Daniel J. Bernstein was meant to run with 20 rounds.
As i can configure the rounds in Bouncycastle with Salsa20Engine, do i have better security by increasing the rounds to 1000? The ...
2
votes
1answer
972 views
Is a KDF needed when using X25519 for ECDH and XChaCha20-Poly1305 for AEAD?
Is a KDF needed when using X25519 for ECDH and XChaCha20-Poly1305 or XSalsa20-Poly1305 for authenticated encryption?
My hypothesis is "no" because the key from X25519 is less than 256 bits long; ...
4
votes
2answers
540 views
Can one extend the nonce of ChaCha/Salsa20 by XORing the extra bits with the key?
Can one extend the ChaCha and Salsa20 nonces by XORing the extra nonce bits with the key?
My reasoning is as follows: the Rumba compression function allows attackers to supply any 48-byte input to ...
3
votes
1answer
1k views
Does XChaCha20 exist with similar properties to XSalsa20?
Does XChaCha20 (built from ChaCha20 just like XSalsa20 is built from Salsa20) exist and have XSalsa20's desirable properties?
2
votes
1answer
1k views
Is XSalsa20-Poly1305-SIV a reasonable choice for nonce-misuse-resistant authenticated encryption?
Consider XSalsa20-Poly1305-SIV. This is obtained by:
computing a MAC $t_{secret}$ of the plaintext from the key and nonce, as in ChaCha20-Poly1305 except that the plaintext, not the ciphertext, is ...
Hot Network Questions
- Isomorphic morphisms. A 27-morphism category
- Does the construction "should + of + past participle" exist?
- Why does this alias using awk not return a clean response like my other two?
- When buying a property, is your agent's incentive contrary to yours?
- Why is Gurobi output in Pyomo returning floating-point values rather than optimal integer solution?
- How do I find this type of starter capacitor? (photo)
- How prior distribution over neural networks parameters is implemented in practice?
- Can I carry 25 pounds in cash to UK without a receipt?
- What is the purpose of this black plastic loop around rim spokes?
- Why is my stove tripping the breaker?
- How to draw two circles on sphere?
- What chord is "A7+4"?
- Limitations of 16S rRNA sequencing
- How to dynamically pick a member from two similar C++ structures while avoiding code duplication?
- Stripped brake mount on fork lower
- Can you prove that 3 + 1 = 5?
- What does "confused TF" mean?
- Why do some planets in Star Trek have a numeric designation while others have just a name?
- "to hit one's funny bone"
- Where are the relics of Anthony the Great?
- Why do we need to reheat food?
- 'loose' cells on top tabular
- Taking a theorem as a definition and proving the original definition as a theorem
- What are the causes of negative real interest rates?