Class XChaCha20Poly1305

  • All Implemented Interfaces:
    AEADCipher

    public class XChaCha20Poly1305
    extends ChaCha20Poly1305
    XChaCha20-Poly1305 AEAD construction as described in draft-irtf-cfrg-xchacha-03 sec. 2.4.

    Identical to ChaCha20Poly1305 except that the underlying stream cipher is XChaCha20Engine (192 bit nonce instead of 96 bit). The extended nonce makes random-nonce strategies safe at scale: with a 192 bit nonce, collisions remain negligibly likely up to 2^80 messages per key, removing the per-key counter / deterministic-nonce constraint that standard ChaCha20-Poly1305 imposes.

    • Constructor Detail

      • XChaCha20Poly1305

        public XChaCha20Poly1305()
      • XChaCha20Poly1305

        public XChaCha20Poly1305​(Mac poly1305)