tree 898f1fe4ccfed6ceff6411ba73e402a4084d920d
parent e0829623afd464429396234eeac9277b0135e15f
author Filippo Valsorda <filippo@golang.org> 1563036753 -0400
committer Filippo Valsorda <filippo@golang.org> 1573508387 +0000

chacha20: implement XChaCha20

Simply add the NonceSizeX constant, and accept 24 bytes nonces in
NewUnauthenticatedCipher. Based on draft-irtf-cfrg-xchacha-01 and
libsodium's implementation.

Fixes golang/go#24485

Change-Id: I551c8ace258bd54b95bb204c8bb34bccd1c4b615
Reviewed-on: https://go-review.googlesource.com/c/crypto/+/185991
Reviewed-by: Michael Munday <mike.munday@ibm.com>