Questions tagged [xsalsa20]
XSalsa20 is a variant of the Salsa20 cipher with a longer nonce.
6
questions
6
votes
2answers
533 views
Is there an upper limit to plaintext size in XSalsa20Poly1305?
While fiddling with the NaCl implementation in Go, specifically SecretBox, a general crypto question came up after reading the documentation.
Quote:
Package secretbox encrypts and authenticates ...
1
vote
1answer
300 views
Bouncycastle and Salsa rounds
Salsa by Daniel J. Bernstein was meant to run with 20 rounds.
As i can configure the rounds in Bouncycastle with Salsa20Engine, do i have better security by increasing the rounds to 1000? The ...
0
votes
1answer
608 views
Is a KDF needed when using X25519 for ECDH and XChaCha20-Poly1305 for AEAD?
Is a KDF needed when using X25519 for ECDH and XChaCha20-Poly1305 or XSalsa20-Poly1305 for authenticated encryption?
My hypothesis is "no" because the key from X25519 is less than 256 bits long; ...
4
votes
2answers
416 views
Can one extend the nonce of ChaCha/Salsa20 by XORing the extra bits with the key?
Can one extend the ChaCha and Salsa20 nonces by XORing the extra nonce bits with the key?
My reasoning is as follows: the Rumba compression function allows attackers to supply any 48-byte input to ...
3
votes
1answer
1k views
Does XChaCha20 exist with similar properties to XSalsa20?
Does XChaCha20 (built from ChaCha20 just like XSalsa20 is built from Salsa20) exist and have XSalsa20's desirable properties?
2
votes
1answer
549 views
Is XSalsa20-Poly1305-SIV a reasonable choice for nonce-misuse-resistant authenticated encryption?
Consider XSalsa20-Poly1305-SIV. This is obtained by:
computing a MAC $t_{secret}$ of the plaintext from the key and nonce, as in ChaCha20-Poly1305 except that the plaintext, not the ciphertext, is ...
