AEAD_CHACHA20_POLY1305

E251780

AEAD_CHACHA20_POLY1305 is an authenticated encryption algorithm that combines the ChaCha20 stream cipher with the Poly1305 message authentication code to provide both confidentiality and integrity for data.

All labels observed (5)

How this entity was disambiguated

Statements (47)

Predicate Object
instanceOf AEAD construction
authenticated encryption with associated data algorithm
associatedDataRole authenticated but not encrypted
basedOnCipherDesignedBy Daniel J. Bernstein
blockFunctionOutputBits 512
category modern AEAD cipher suite
cipherType stream cipher based
designedFor high performance in software
resistance to timing attacks
encryptionMode counter mode using ChaCha20
encryptionType symmetric-key encryption
failureMode nonce reuse is catastrophic for security
keySizeBits 256
MACInput ciphertext and associated data
MACKeySizeBits 256
MACType one-time polynomial MAC
nonceRequirement unique per key
nonceSizeBits 96
performanceCharacteristic fast on CPUs without AES hardware acceleration
primaryUseCase application-level message encryption
transport layer security
provides authenticity
confidentiality
integrity
recommendedBy Internet Engineering Task Force
surface form: IETF
securityAssumption ChaCha20 pseudorandomness
Poly1305 unforgeability with one-time keys
securityGoal IND-CPA confidentiality
INT-CTXT integrity
standardizedIn RFC 7539
RFC 8439
status widely deployed
supports associated data
tagSizeBits 128
tagVerification constant-time comparison recommended
usedIn BoringSSL
Google Chrome
Mozilla Firefox
OpenSSL
QUIC
SSH implementations
TLS 1.2 (with extensions)
RFC 8446
surface form: TLS 1.3

libsodium
usesCipher ChaCha20
usesKeyDerivation ChaCha20 block function for Poly1305 key
usesMAC Poly1305

How these facts were elicited

Referenced by (10)

Full triples — surface form annotated when it differs from this entity's canonical label.

RFC 7539 defines AEAD_CHACHA20_POLY1305
this entity surface form: ChaCha20-Poly1305 AEAD construction
RFC 7539 specifies AEAD_CHACHA20_POLY1305
RFC 8439 title AEAD_CHACHA20_POLY1305
this entity surface form: ChaCha20 and Poly1305 for IETF Protocols
RFC 8439 defines AEAD_CHACHA20_POLY1305
this entity surface form: ChaCha20-Poly1305
RFC 8439 defines AEAD_CHACHA20_POLY1305
RFC 8439 defines AEAD_CHACHA20_POLY1305
this entity surface form: AEAD_XCHACHA20_POLY1305
RFC 8439 specifies AEAD_CHACHA20_POLY1305
this entity surface form: ChaCha20-Poly1305 AEAD construction
libsodium implementsPrimitive AEAD_CHACHA20_POLY1305
this entity surface form: ChaCha20-Poly1305
AES-Poly1305 relatedTo AEAD_CHACHA20_POLY1305
this entity surface form: ChaCha20-Poly1305
OpenSSH supportsEncryptionAlgorithm AEAD_CHACHA20_POLY1305
this entity surface form: ChaCha20-Poly1305