Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

x/crypto/chacha20poly1305: request for xchacha20 variant #21447

Closed
mgood opened this issue Aug 15, 2017 · 3 comments
Closed

x/crypto/chacha20poly1305: request for xchacha20 variant #21447

mgood opened this issue Aug 15, 2017 · 3 comments
Labels
FrozenDueToAge Proposal Proposal-Crypto Proposal related to crypto packages or other security issues
Milestone

Comments

@mgood
Copy link

mgood commented Aug 15, 2017

The chacha20poly1305 package includes the IETF version used for TLS. It would also be useful to have a standard implementation of the XChaCha20 variation of the algorithm since it uses a larger nonce size (192 bits) that is considered suitable for safely using with random nonces.

The libsodium docs suggest this version as the recommended AEAD construction:
https://download.libsodium.org/doc/secret-key_cryptography/xchacha20-poly1305_construction.html

For reference, a Go implementation supporting XChaCha20 is available from:
https://github.com/aead/chacha20poly1305

I had looked at using nacl/secretbox, but we have a use for the "additional data" which it doesn't support.

@aead
Copy link
Contributor

aead commented Aug 16, 2017

cc/ @agl

@ianlancetaylor
Copy link
Contributor

CC @FiloSottile

@ianlancetaylor ianlancetaylor added the NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. label Mar 30, 2018
@ianlancetaylor ianlancetaylor added this to the Go1.11 milestone Mar 30, 2018
@FiloSottile FiloSottile added Proposal Proposal-Crypto Proposal related to crypto packages or other security issues and removed NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. labels Mar 30, 2018
@bradfitz bradfitz modified the milestones: Go1.11, Unreleased Jun 7, 2018
@FiloSottile
Copy link
Contributor

@golang golang locked and limited conversation to collaborators Nov 19, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
FrozenDueToAge Proposal Proposal-Crypto Proposal related to crypto packages or other security issues
Projects
None yet
Development

No branches or pull requests

6 participants