Details
Details
- Reviewers
cem - Group Reviewers
manpages - Commits
- R10:a899ce4ba4c4: The ChaCha20 counter is little endian, not big endian.
Diff Detail
Diff Detail
- Repository
- R10 FreeBSD src repository
- Lint
Automatic diff as part of commit; lint not applicable. - Unit
Automatic diff as part of commit; unit tests not applicable.
Event Timeline
Comment Actions
The variant in the kernel uses the 8/8 split. There are other variants however. libsodium has a xchacha variant that wireguard also uses (and I think that there are proposals to standardize in IETF for both IPsec and TLS) that uses a 24/4 split of nonce vs counter. If we add that in the future I would probably call it CRYPTO_XCHACHA20_POLY1305 to match the libsodium name.