Questions tagged [chacha20]

ChaCha20 is a stream cipher (closely related to Salsa20) which when coupled with the Poly1305 MAC, serves as an alternative to AES (AES_GCM).

Filter by
Sorted by
Tagged with
1 vote
1 answer

Best practice for sharing and storing encrypted data between server and client

I'm working on a system that shares data between a client and server. The end goal of this system is to store server-encrypted data on the client's hard drive, using keys generated by the server. the ...
MatkatMusic's user avatar
0 votes
0 answers

How to implement ChaCha20Poly1305 with large files? (Streamed/Chunked AEADs)

I have a private file encryption project that I'm working on that currently uses Encrypt-then-MAC. However, I've been looking at age and the article that's referenced in the spec that discusses ...
Zachary's user avatar
3 votes
4 answers

Windows Server 2019: Add CHACHA20-POLY1305 ciphersuites for IIS

Is there a way to add/enable ECDHE-ECDSA-CHACHA20-POLY1305 and ECDHE-RSA-CHACHA20-POLY1305 ciphersuites on Windows Server 2019 (Build 1809 or later) for HTTPS configuration of IIS webserver? According ...
Pylyp Lebediev's user avatar
2 votes
1 answer

Is AES the recommended symmetric cipher for production level software?

I was considering developing an application level software for file encryption after stress testing many of my implementations of popular symmetric ciphers. I would love to support multiple ...
Aravind A's user avatar
  • 157
0 votes
2 answers

Using Chacha20 with a NULL nonce

I am new to ChaCha20. From the RFC -- The inputs to ChaCha20 are: o A 256-bit key, treated as a concatenation of eight 32-bit little- endian integers. o A 96-bit nonce, treated as a ...
SFlow's user avatar
  • 283
4 votes
1 answer

An alternative for /dev/urandom

I like to overwrite my harddisk with random data. Since /dev/urandom as source is too slow to overwrite a large amount of data in a reasonable time, I'm looking for a good alternative. These two ...
user avatar
0 votes
1 answer

When encrypting password hashes, how to handle nonces?

I know that encrypting password hashes is a contentious issue. However, I have seen it recommended in some quarters. I know for instance that DropBox did this at one time with AES256. In these cases, ...
Prime's user avatar
  • 514
2 votes
1 answer

Bluetooth low energy encryption using chacha20-poly1305

The BLE data is encrypted using AES-CCM. the TLS1.3 removed AES-CCM from the cipher-suits due to security issue. My question : why don't they encrypt the BLE using chacha20-poly1205 ? is it because ...
hardyrama's user avatar
  • 133
2 votes
1 answer

Are there reliable Linux ChaCha20-Poly1305 implementations available for stream encryption?

I'd currently encrypt a stream by piping it through the following command: openssl enc -aes-256-cbc -pass file:/[keyfile path] Is there a reliable implementation of ChaCha20-Poly1305 that I can use ...
knaccc's user avatar
  • 220
2 votes
1 answer

How to synchronize a nonce between two participants?

I am currently working with a symmetric algorithm which requires a nonce for encryption, and logically for decryption as well. However, I am a bit confused about how I would go and synchronize the ...
Sossenbinder's user avatar
2 votes
2 answers

Token generation and random numbers

I have a swift server, where currently authentication is handled through a simple email+hashed password combination. I want to replace this with an access token ( + expiration ) so I can remove the ...
Antwan van Houdt's user avatar