Expand description
RFC 8439 ChaCha20, Poly1305, and the ChaCha20-Poly1305 AEAD; and XChaCha20-Poly1305, the same AEAD with a 192-bit nonce.
Not FIPS-approved. These are included because they are the right answer
on hardware without AES acceleration, and because interoperating with TLS
1.3, WireGuard, and age requires them. The ontology marks the whole family
fips_status: NotApproved, and ic-fips refuses to construct them while
the module is in approved mode.
Structs§
- ChaCha20
Poly1305 - RFC 8439 ChaCha20-Poly1305 AEAD.
- Poly1305
- RFC 8439 Poly1305 one-time authenticator.
- XCha
Cha20 Poly1305 - XChaCha20-Poly1305: ChaCha20-Poly1305 with a 192-bit nonce (draft-irtf-cfrg-xchacha-03).
Functions§
- chacha20_
xor - XOR
datawith the ChaCha20 keystream, starting atcounter.