3 ms·
> Chapoly depends on a reliable per-message CSPRNG What? You just need the CSPRNG for generating the initial nonce (to use with the shared secret). You can jus
by dependenttypes 6y ago
> Chapoly depends on a reliable per-message CSPRNG
What? You just need the CSPRNG for generating the initial nonce (to use with the shared secret). You can just use a counter for different messages.
- tptacek 6y agoIf you're doing that, you're not using extended-nonce ChaCha. The counter, of course, is often even more fraught.
- dependenttypes 6y ago> If you're doing that, you're not using extended-nonce ChaCha This is not the case at all.