RustCrypto: crypto_secretstream
Pure Rust implementation of libsodium's crypto_secretstream primitive,
providing an AEAD using ChaCha20 and Poly1305.
It is tested against sodiumoxide, a Rust libsodium bindings.
License
Licensed under either of:
at your option.
Contribution
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.
Caveats
- auto-rekeying on counter overflow is not tested
Tag::Finaldoesn't actually do anything, as libsodium does but not sodiumoxideKeyandNoncearen't zeroize, maybe it should- MAC check in
PullStreamis not constant time