-
Because reverse mode hard-codes the cipher to AES-SIV . Running reverse mode with xchacha produces an error.
Is there anyway to enable xchacha as the cipher while using reverse mode? |
Beta Was this translation helpful? Give feedback.
Answered by
rfjakob
Jun 21, 2023
Replies: 1 comment
-
No, unfortunately, this is insecure. Reverse mode needs a chipher that is resistant against nonce reuse, and (x)chacha-poly is not ( https://crypto.stackexchange.com/questions/32075/what-happens-if-a-nonce-is-reused-in-chacha20-poly1305 ) |
Beta Was this translation helpful? Give feedback.
0 replies
Answer selected by
rfjakob
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
No, unfortunately, this is insecure. Reverse mode needs a chipher that is resistant against nonce reuse, and (x)chacha-poly is not ( https://crypto.stackexchange.com/questions/32075/what-happens-if-a-nonce-is-reused-in-chacha20-poly1305 )