mirror of
https://code.briarproject.org/briar/briar.git
synced 2026-03-04 12:38:18 +01:00
akwizgran created page: BDF
@@ -17,7 +17,7 @@ BTP uses the following cryptographic primitives:
|
|||||||
|
|
||||||
All keys are KEY_LEN bytes and all nonces are NONCE_LEN bytes. The output of MAC(k, m) is MAC_LEN bytes, and the output of ENC(k, n, m) is AUTH_LEN bytes longer than m. For simplicity we require that MAC_LEN == KEY_LEN.
|
All keys are KEY_LEN bytes and all nonces are NONCE_LEN bytes. The output of MAC(k, m) is MAC_LEN bytes, and the output of ENC(k, n, m) is AUTH_LEN bytes longer than m. For simplicity we require that MAC_LEN == KEY_LEN.
|
||||||
|
|
||||||
> Implementation note: The current version of BTP uses BLAKE2s as the message authentication code and XSalsa20-Poly1305 as the authenticated cipher. This gives KEY_LEN = 32, MAC_LEN = 32, NONCE_LEN = 24, and AUTH_LEN = 16.
|
> Implementation note: The current implementation uses HMAC-SHA-256 as the message authentication code and AES-256-GCM as the authenticated cipher. In the next release we propose to use keyed BLAKE2s as the message authentication code and XSalsa20/Poly1305 as the authenticated cipher. This gives KEY_LEN = 32, MAC_LEN = 32, NONCE_LEN = 24, and AUTH_LEN = 16.
|
||||||
|
|
||||||
### Initial state
|
### Initial state
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user