3 ms·
Salsa/ChaCha does not halve the output and XOR it together, they add the input block to the output to get non-invertability. Salsa/ChaCha also does not have a
by nightcracker 9y ago
Salsa/ChaCha does not halve the output and XOR it together, they add the input block to the output to get non-invertability.
Salsa/ChaCha also does not have a block cipher, just an unkeyed permutation function which is applied to the key plus a constant and counter.
- KMag 9y agoThanks for the correction. Note that a couple of times I spelled Davies as Davie. Also note that after editing, my description of the Davies-Meyer addition step got mangled. The original copy is added to the result of the encryption.