AEAD_CHACHA20_POLY1305

E251780

AEAD_CHACHA20_POLY1305 is an authenticated encryption algorithm that combines the ChaCha20 stream cipher with the Poly1305 message authentication code to provide both confidentiality and integrity for data.

All labels observed (5)

How this entity was disambiguated

Statements (47)

Predicate Object
instanceOf AEAD construction ⓘ
authenticated encryption with associated data algorithm ⓘ
associatedDataRole authenticated but not encrypted ⓘ
basedOnCipherDesignedBy Daniel J. Bernstein ⓘ
blockFunctionOutputBits 512 ⓘ
category modern AEAD cipher suite ⓘ
cipherType stream cipher based ⓘ
designedFor high performance in software ⓘ
resistance to timing attacks ⓘ
encryptionMode counter mode using ChaCha20 ⓘ
encryptionType symmetric-key encryption ⓘ
failureMode nonce reuse is catastrophic for security ⓘ
keySizeBits 256 ⓘ
MACInput ciphertext and associated data ⓘ
MACKeySizeBits 256 ⓘ
MACType one-time polynomial MAC ⓘ
nonceRequirement unique per key ⓘ
nonceSizeBits 96 ⓘ
performanceCharacteristic fast on CPUs without AES hardware acceleration ⓘ
primaryUseCase application-level message encryption ⓘ
transport layer security ⓘ
provides authenticity ⓘ
confidentiality ⓘ
integrity ⓘ
recommendedBy IETF ⓘ
securityAssumption ChaCha20 pseudorandomness ⓘ
Poly1305 unforgeability with one-time keys ⓘ
securityGoal IND-CPA confidentiality ⓘ
INT-CTXT integrity ⓘ
standardizedIn RFC 7539 ⓘ
RFC 8439 ⓘ
status widely deployed ⓘ
supports associated data ⓘ
tagSizeBits 128 ⓘ
tagVerification constant-time comparison recommended ⓘ
usedIn BoringSSL ⓘ
Google Chrome ⓘ
Mozilla Firefox ⓘ
OpenSSL ⓘ
QUIC ⓘ
SSH implementations ⓘ
TLS 1.2 (with extensions) ⓘ
TLS 1.3 ⓘ
linked to: RFC 8446

libsodium ⓘ
usesCipher ChaCha20 ⓘ
usesKeyDerivation ChaCha20 block function for Poly1305 key ⓘ
usesMAC Poly1305 ⓘ

How these facts were elicited

Referenced by (11)

Full triples — surface form annotated when it differs from this entity's canonical label.

RFC 7539 → defines → ChaCha20-Poly1305 AEAD construction ⓘ
linked to: AEAD_CHACHA20_POLY1305
RFC 7539 → specifies → AEAD_CHACHA20_POLY1305 ⓘ
RFC 8439 → title → ChaCha20 and Poly1305 for IETF Protocols ⓘ
linked to: AEAD_CHACHA20_POLY1305
RFC 8439 → defines → ChaCha20-Poly1305 ⓘ
linked to: AEAD_CHACHA20_POLY1305
RFC 8439 → defines → AEAD_CHACHA20_POLY1305 ⓘ
RFC 8439 → defines → AEAD_XCHACHA20_POLY1305 ⓘ
linked to: AEAD_CHACHA20_POLY1305
RFC 8439 → specifies → ChaCha20-Poly1305 AEAD construction ⓘ
linked to: AEAD_CHACHA20_POLY1305
libsodium → implementsPrimitive → ChaCha20-Poly1305 ⓘ
linked to: AEAD_CHACHA20_POLY1305
AES-Poly1305 → relatedTo → ChaCha20-Poly1305 ⓘ
linked to: AEAD_CHACHA20_POLY1305
OpenSSH → supportsEncryptionAlgorithm → ChaCha20-Poly1305 ⓘ
linked to: AEAD_CHACHA20_POLY1305
Hybrid Public Key Encryption → canUseAEAD → ChaCha20-Poly1305 ⓘ
linked to: AEAD_CHACHA20_POLY1305