Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

There is a section called "integrity: not optional", where he uses MACs (which I would consider to be conceptually simpler to understand than AEADs) to explain how integrity can be implemented.

Later, in a section called "Level 2: choosing crypto", he recommends using ChaCha20 Poly1305.

Anyway, this isn't really my crusade, I just think that if you read the informal blog post as an informal blog post, it's fine.



I think the criticism is still valid: combining a MAC and cipher into an AE scheme (especially an AEAD scheme) is anything but trivial. For example, I don't think it's reasonable to suggest someone would, given those two tools, end up with the moral equivalent of secretbox but with ChaCha20 replacing XSalsa20. (At least there's not a padding timing differential for MtE, but still.)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: