mirror of
https://github.com/apache/nuttx.git
synced 2026-08-03 21:29:02 +00:00
5e2ce6190d
CRYPTO_CHACHA20 implements the RFC 8439/IETF parameterization (32-bit counter + 96-bit nonce). SSH's chacha20-poly1305@openssh.com uses the original DJB construction instead: a 64-bit block counter in state words 12..13 and a 64-bit nonce in words 14..15 (libtomcrypt's chacha_ivctr64). The two layouts produce different keystreams for the same key, so an SSH server cannot interoperate with OpenSSH clients through the IETF variant. Signed-off-by: Felipe Moura <moura.fmo@gmail.com> |
||
|---|---|---|
| .. | ||
| aes.h | ||
| blf.h | ||
| bn.h | ||
| cast.h | ||
| chachapoly.h | ||
| cmac.h | ||
| cryptodev.h | ||
| cryptosoft.h | ||
| curve25519.h | ||
| ecc.h | ||
| gmac.h | ||
| hmac.h | ||
| idgen.h | ||
| key_wrap.h | ||
| md5.h | ||
| poly1305.h | ||
| rijndael.h | ||
| rmd160.h | ||
| sha1.h | ||
| sha2.h | ||
| siphash.h | ||
| xform.h | ||