d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

The ChaCha20 counter is little endian, not big endian.

Browse Source 
Reviewed by:	cem
Sponsored by:	Netflix
Differential Revision:	https://reviews.freebsd.org/D28755
This commit is contained in:
John Baldwin 2021-03-03 15:17:37 -08:00
parent a079e38b08
commit a899ce4ba4
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
share/man/man7/crypto.7
View File

@ -27,7 +27,7 @@
.\"
.\" $FreeBSD$
.\"
.Dd February 18, 2021
.Dd March 3, 2021
.Dt CRYPTO 7
.Os
.Sh NAME
@ -136,7 +136,7 @@ counter rollover.
.Dv CRYPTO_CHACHA20
accepts a 16 byte IV.
The first 8 bytes are used as a nonce.
The last 8 bytes are used as 64-bit big-endian block counter.
The last 8 bytes are used as a 64-bit little-endian block counter.
.Ss Authenticated Encryption with Associated Data Algorithms
AEAD algorithms in OCF combine a stream cipher with an authentication
algorithm to provide both secrecy and authentication.