chacha20+poly1305 authenticated encryption

James Cloos cloos at jhcloos.com
Fri Nov 15 06:26:33 EST 2013


>>>>> "DM" == Damien Miller <djm at mindrot.org> writes:

DM> Here's a diff to implement ChaCha20+Poly1305 as an authenticated
DM> encryption mode. It authenticates the packet length and payload,
DM> and uses a separate ChaCh20 instance to encrypt the packet length
DM> to preserve privacy of packet lengths* while avoiding any decryption
DM> oracle for the main packet payload.

Cool.

I'd like to test it out, but for logistics reasons I'll have to do so on
a linux box.  Is anything written on what is needed to convert from the
openbsd cvs tree to the portable tree?  Or do you have a version of the
patch applicable to the portable's cvs?

-JimC
-- 
James Cloos <cloos at jhcloos.com>         OpenPGP: 1024D/ED7DAEA6



More information about the openssh-unix-dev mailing list