On Tue, Mar 4, 2014 at 3:23 PM, Stefan Bühler wrote:
>> It has not been approved yet, but the latest TLS proposal for chacha
>> is with 96-bit nonces and there is no plan to change. So at least for
>> gnutls only the 96-bit nonce version is relevant.
> I did propose using XChaCha (similar to XSal
Hi,
On Tue, 4 Mar 2014 15:07:03 +0100
Nikos Mavrogiannopoulos wrote:
> It has not been approved yet, but the latest TLS proposal for chacha
> is with 96-bit nonces and there is no plan to change. So at least for
> gnutls only the 96-bit nonce version is relevant.
I did propose using XChaCha (si
On Tue, Mar 4, 2014 at 2:40 PM, Niels Möller wrote:
>> Does anyone else know of use or interest in 128-bit chacha keys? It
>> would definitely make things a bit simpler if we can omit support for
>> 128-bit keys. (And if we skip it now, we could of course reintroduce it
>> later if it turns out t
ni...@lysator.liu.se (Niels Möller) writes:
> Does anyone else know of use or interest in 128-bit chacha keys? It
> would definitely make things a bit simpler if we can omit support for
> 128-bit keys. (And if we skip it now, we could of course reintroduce it
> later if it turns out to be needed).
> "NM" == Niels Möller writes:
NM> Does anyone else know of use or interest in 128-bit chacha keys?
Given DJB's paper¹ on parallel hardware cracking, which strongly suggests
against using 128 bit symmetric if one is concerned about well funded
adversaries, I doubt there are any.
1] IINM, I'
Stefan Bühler writes:
> My preference, if you want to have a fixed length in the name, is
> still "chacha_set_key128" and similar. Not sure about
> "chacha_128_set_key", "chacha20_128_set_key", ...
Thanks for the feedback.
> As a side note: the paper for Chacha only mentions the 256-bit key
Hi,
I probably won't convince you anymore, so feel free to ignore this :)
Anyway, I just wanted to say that
#define CHACHA128_KEY_SIZE 16
#define CHACHA256_KEY_SIZE 32
[...]
void
chacha128_set_key(struct chacha_ctx *ctx, const uint8_t *key);
void
chacha256_set_key(struct chacha_ctx *ctx, const ui
