chacha20poly1305-0.10.1/.cargo_vcs_info.json0000644000000001560000000000100137030ustar { "git": { "sha1": "746f70a5f6c7371e723dc64e04f2115b56f24d27" }, "path_in_vcs": "chacha20poly1305" }chacha20poly1305-0.10.1/CHANGELOG.md000064400000000000000000000126400072674642500143350ustar 00000000000000# Changelog All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). ## 0.10.1 (2022-08-09) ### Added - `rand_core` feature ([#467]) [#467]: https://github.com/RustCrypto/AEADs/pull/467 ## 0.10.0 (2022-07-31) ### Added - `getrandom` feature ([#446]) - Impl `ZeroizeOnDrop` for `ChaChaPoly1305` ([#447]) ### Changed - Bump `chacha20` dependency to v0.9 ([#402]) - Rust 2021 edition upgrade; MSRV 1.56+ ([#435]) - Bump `aead` dependency to v0.5 ([#444]) - Bump `poly1305` dependency to v0.8 ([#454]) [#402]: https://github.com/RustCrypto/AEADs/pull/402 [#435]: https://github.com/RustCrypto/AEADs/pull/435 [#444]: https://github.com/RustCrypto/AEADs/pull/444 [#446]: https://github.com/RustCrypto/AEADs/pull/446 [#447]: https://github.com/RustCrypto/AEADs/pull/447 [#454]: https://github.com/RustCrypto/AEADs/pull/454 ## 0.9.1 (2022-07-07) ### Changed - Unpin `zeroize` dependency ([#438]) [#438]: https://github.com/RustCrypto/AEADs/pull/438 ## 0.9.0 (2021-08-29) ### Changed - Bump `chacha20` to v0.8: now a hard dependency ([#365]) - MSRV 1.51+ ([#365]) ### Removed - `chacha20` feature: now a hard dependency ([#365]) - `xchacha20` feature: now always-on ([#365]) - `chacha20-reduced-round` and `xchacha20-reduced-round` have been coalesced into the `reduced-round` feature ([#365]) [#365]: https://github.com/RustCrypto/AEADs/pull/365 ## 0.8.2 (2021-08-28) ### Added - `XChaCha*` reduced-round variants ([#355]) ### Changed - Relax `subtle` and `zeroize` requirements ([#360]) [#355]: https://github.com/RustCrypto/AEADs/pull/355 [#360]: https://github.com/RustCrypto/AEADs/pull/360 ## 0.8.1 (2021-07-20) ### Changed - Pin `zeroize` dependency to v1.3 ([#349]) [#349]: https://github.com/RustCrypto/AEADs/pull/349 ## 0.8.0 (2021-04-29) ### Added - Wycheproof test vectors ([#274]) ### Changed - Bump `aead` crate dependency to v0.4 ([#270]) - `xchacha` feature name ([#257]) - MSRV 1.49+ ([#286], [#289]) - Bump `chacha20` crate dependency to v0.7 ([#286]) - Bump `poly1305` crate dependency to v0.7 ([#289]) [#257]: https://github.com/RustCrypto/AEADs/pull/257 [#270]: https://github.com/RustCrypto/AEADs/pull/270 [#274]: https://github.com/RustCrypto/AEADs/pull/274 [#286]: https://github.com/RustCrypto/AEADs/pull/286 [#289]: https://github.com/RustCrypto/AEADs/pull/289 ## 0.7.1 (2020-10-25) ### Changed - Expand README.md ([#233]) [#233]: https://github.com/RustCrypto/AEADs/pull/233 ## 0.7.0 (2020-10-16) ### Changed - Replace `block-cipher`/`stream-cipher` with `cipher` crate ([#229]) - Bump `chacha20` dependency to v0.6 ([#229]) [#229]: https://github.com/RustCrypto/AEADs/pull/229 ## 0.6.0 (2020-09-17) ### Added - Optional `std` feature; disabled by default ([#217]) ### Changed - Upgrade `chacha20` to v0.5; `stream-cipher` to v0.7 ([#209]) [#217]: https://github.com/RustCrypto/AEADs/pull/217 [#209]: https://github.com/RustCrypto/AEADs/pull/209 ## 0.5.1 (2020-06-11) ### Added - `Key`, `Nonce`, and `XNonce` type aliases ([#168]) [#168]: https://github.com/RustCrypto/AEADs/pull/168 ## 0.5.0 (2020-06-06) ### Changed - Bump `aead` crate dependency to v0.3; MSRV 1.41+ ([#144]) - Bump `chacha20` crate dependency to v0.4 ([#159]) - Bump `poly1305` crate dependency to v0.6 ([#158]) [#159]: https://github.com/RustCrypto/AEADs/pull/159 [#158]: https://github.com/RustCrypto/AEADs/pull/158 [#144]: https://github.com/RustCrypto/AEADs/pull/144 ## 0.4.1 (2020-03-09) ### Fixed - `Clone` impl on `ChaChaPoly1305` ([#103]) [#103]: https://github.com/RustCrypto/AEADs/pull/103 ## 0.4.0 (2020-03-07) ### Added - `chacha20` cargo feature; ; replace macros with generics ([#99]) [#99]: https://github.com/RustCrypto/AEADs/pull/99 ## 0.3.3 (2020-02-27) ### Fixed - Wording in documentation about security audit ([#84]) [#84]: https://github.com/RustCrypto/AEADs/pull/84 ## 0.3.2 (2020-02-26) ### Added - Notes about NCC audit to documentation ([#80]) [#80]: https://github.com/RustCrypto/AEADs/pull/80 ## 0.3.1 (2020-01-16) ### Added - `ChaCha8Poly1305`/`ChaCha12Poly1305` reduced round variants ([#69]) - `criterion`-based benchmark ([#66]) ### Changed - Upgrade to `chacha20` v0.3; adds AVX2 backend w\ +60% perf ([#67]) [#66]: https://github.com/RustCrypto/AEADs/pull/66 [#67]: https://github.com/RustCrypto/AEADs/pull/67 [#69]: https://github.com/RustCrypto/AEADs/pull/69 ## 0.3.0 (2019-11-26) ### Added - `heapless` feature ([#51]) ### Changed - Upgrade `aead` crate to v0.2; `alloc` now optional ([#43]) [#51]: https://github.com/RustCrypto/AEADs/pull/51 [#43]: https://github.com/RustCrypto/AEADs/pull/43 ## 0.2.2 (2019-11-14) ### Changed - Upgrade to `zeroize` 1.0 ([#36]) [#36]: https://github.com/RustCrypto/AEADs/pull/36 ## 0.2.1 (2019-10-15) ### Changed - Documentation improvements ([#34]) [#34]: https://github.com/RustCrypto/AEADs/pull/34 ## 0.2.0 (2019-10-06) ### Added - Expose "detached" in-place encryption/decryption APIs ([#21]) ### Changed - Upgrade to `poly1305` crate v0.5 ([#20]) [#21]: https://github.com/RustCrypto/AEADs/pull/21 [#20]: https://github.com/RustCrypto/AEADs/pull/20 ## 0.1.2 (2019-10-01) ### Changed - Update to `zeroize` 1.0.0-pre ([#17]) [#17]: https://github.com/RustCrypto/AEADs/pull/17 ## 0.1.1 (2019-09-19) ### Changed - Update to `poly1305` v0.4 ([#8]) [#8]: https://github.com/RustCrypto/AEADs/pull/8 ## 0.1.0 (2019-08-30) - Initial release chacha20poly1305-0.10.1/Cargo.toml0000644000000037320000000000100117040ustar # THIS FILE IS AUTOMATICALLY GENERATED BY CARGO # # When uploading crates to the registry Cargo will automatically # "normalize" Cargo.toml files for maximal compatibility # with all versions of Cargo and also rewrite `path` dependencies # to registry (e.g., crates.io) dependencies. # # If you are reading this file be aware that the original Cargo.toml # will likely look very different (and much more reasonable). # See Cargo.toml.orig for the original contents. [package] edition = "2021" name = "chacha20poly1305" version = "0.10.1" authors = ["RustCrypto Developers"] description = """ Pure Rust implementation of the ChaCha20Poly1305 Authenticated Encryption with Additional Data Cipher (RFC 8439) with optional architecture-specific hardware acceleration. Also contains implementations of the XChaCha20Poly1305 extended nonce variant of ChaCha20Poly1305, and the reduced-round ChaCha8Poly1305 and ChaCha12Poly1305 lightweight variants. """ documentation = "https://docs.rs/chacha20poly1305" readme = "README.md" keywords = [ "aead", "chacha20", "poly1305", "xchacha20", "xchacha20poly1305", ] categories = [ "cryptography", "no-std", ] license = "Apache-2.0 OR MIT" repository = "https://github.com/RustCrypto/AEADs/tree/master/chacha20poly1305" [package.metadata.docs.rs] all-features = true rustdoc-args = [ "--cfg", "docsrs", ] [dependencies.aead] version = "0.5" default-features = false [dependencies.chacha20] version = "0.9" features = ["zeroize"] [dependencies.cipher] version = "0.4" [dependencies.poly1305] version = "0.8" [dependencies.zeroize] version = "1.5" default-features = false [dev-dependencies.aead] version = "0.5" features = ["dev"] default-features = false [features] alloc = ["aead/alloc"] default = [ "alloc", "getrandom", ] getrandom = [ "aead/getrandom", "rand_core", ] heapless = ["aead/heapless"] rand_core = ["aead/rand_core"] reduced-round = [] std = [ "aead/std", "alloc", ] stream = ["aead/stream"] chacha20poly1305-0.10.1/Cargo.toml.orig000064400000000000000000000026620072674642500154160ustar 00000000000000[package] name = "chacha20poly1305" version = "0.10.1" description = """ Pure Rust implementation of the ChaCha20Poly1305 Authenticated Encryption with Additional Data Cipher (RFC 8439) with optional architecture-specific hardware acceleration. Also contains implementations of the XChaCha20Poly1305 extended nonce variant of ChaCha20Poly1305, and the reduced-round ChaCha8Poly1305 and ChaCha12Poly1305 lightweight variants. """ authors = ["RustCrypto Developers"] edition = "2021" license = "Apache-2.0 OR MIT" readme = "README.md" documentation = "https://docs.rs/chacha20poly1305" repository = "https://github.com/RustCrypto/AEADs/tree/master/chacha20poly1305" keywords = ["aead", "chacha20", "poly1305", "xchacha20", "xchacha20poly1305"] categories = ["cryptography", "no-std"] [dependencies] aead = { version = "0.5", default-features = false } chacha20 = { version = "0.9", features = ["zeroize"] } cipher = "0.4" poly1305 = "0.8" zeroize = { version = "1.5", default-features = false } [dev-dependencies] aead = { version = "0.5", features = ["dev"], default-features = false } [features] default = ["alloc", "getrandom"] std = ["aead/std", "alloc"] alloc = ["aead/alloc"] getrandom = ["aead/getrandom", "rand_core"] heapless = ["aead/heapless"] rand_core = ["aead/rand_core"] reduced-round = [] stream = ["aead/stream"] [package.metadata.docs.rs] all-features = true rustdoc-args = ["--cfg", "docsrs"] chacha20poly1305-0.10.1/LICENSE-APACHE000064400000000000000000000251410072674642500144500ustar 00000000000000 Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document. "Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License. "Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity. "You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License. "Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files. "Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types. "Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below). "Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof. "Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution." "Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work. 2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form. 3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed. 4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions: (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and (b) You must cause any modified files to carry prominent notices stating that You changed the files; and (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License. You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License. 5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions. 6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file. 7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License. 8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages. 9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability. END OF TERMS AND CONDITIONS APPENDIX: How to apply the Apache License to your work. To apply the Apache License to your work, attach the following boilerplate notice, with the fields enclosed by brackets "[]" replaced with your own identifying information. (Don't include the brackets!) The text should be enclosed in the appropriate comment syntax for the file format. We also recommend that a file or class name and description of purpose be included on the same "printed page" as the copyright notice for easier identification within third-party archives. Copyright [yyyy] [name of copyright owner] Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. chacha20poly1305-0.10.1/LICENSE-MIT000064400000000000000000000020650072674642500141600ustar 00000000000000Copyright (c) 2019 The RustCrypto Project Developers Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. chacha20poly1305-0.10.1/README.md000064400000000000000000000070740072674642500140100ustar 00000000000000# RustCrypto: ChaCha20Poly1305 [![crate][crate-image]][crate-link] [![Docs][docs-image]][docs-link] ![Apache2/MIT licensed][license-image] ![Rust Version][rustc-image] [![Project Chat][chat-image]][chat-link] [![Build Status][build-image]][build-link] Pure Rust implementation of **ChaCha20Poly1305** ([RFC 8439][1]): an [Authenticated Encryption with Associated Data (AEAD)][2] cipher amenable to fast, constant-time implementations in software, based on the [ChaCha20][3] stream cipher and [Poly1305][4] universal hash function. This crate also contains an implementation of **XChaCha20Poly1305**: a variant of ChaCha20Poly1305 with an extended 192-bit (24-byte) nonce. [Documentation][docs-link] ## About ChaCha20Poly1305 is notable for being simple and fast when implemented in pure software. The underlying ChaCha20 stream cipher uses a simple combination of add, rotate, and XOR instructions (a.k.a. "ARX"), and the Poly1305 hash function is likewise extremely simple. While it hasn't received approval from certain standards bodies (i.e. NIST) the algorithm is widely used and deployed. Notably it's mandatory to implement in the Transport Layer Security (TLS) protocol. The underlying ChaCha20 cipher is also widely used as a cryptographically secure random number generator, including internal use by the Rust standard library. ## Security Notes This crate has received one [security audit by NCC Group][5], with no significant findings. We would like to thank [MobileCoin][6] for funding the audit. All implementations contained in the crate are designed to execute in constant time, either by relying on hardware intrinsics (i.e. AVX2 on x86/x86_64), or using a portable implementation which is only constant time on processors which implement constant-time multiplication. It is not suitable for use on processors with a variable-time multiplication operation (e.g. short circuit on multiply-by-zero / multiply-by-one, such as certain 32-bit PowerPC CPUs and some non-ARM microcontrollers). ## License Licensed under either of: * [Apache License, Version 2.0](http://www.apache.org/licenses/LICENSE-2.0) * [MIT license](http://opensource.org/licenses/MIT) at your option. ### Contribution Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions. [//]: # (badges) [crate-image]: https://buildstats.info/crate/chacha20poly1305 [crate-link]: https://crates.io/crates/chacha20poly1305 [docs-image]: https://docs.rs/chacha20poly1305/badge.svg [docs-link]: https://docs.rs/chacha20poly1305/ [license-image]: https://img.shields.io/badge/license-Apache2.0/MIT-blue.svg [rustc-image]: https://img.shields.io/badge/rustc-1.56+-blue.svg [chat-image]: https://img.shields.io/badge/zulip-join_chat-blue.svg [chat-link]: https://rustcrypto.zulipchat.com/#narrow/stream/260038-AEADs [downloads-image]: https://img.shields.io/crates/d/chacha20poly1305.svg [build-image]: https://github.com/RustCrypto/AEADs/workflows/chacha20poly1305/badge.svg?branch=master&event=push [build-link]: https://github.com/RustCrypto/AEADs/actions [//]: # (general links) [1]: https://tools.ietf.org/html/rfc8439 [2]: https://en.wikipedia.org/wiki/Authenticated_encryption [3]: https://github.com/RustCrypto/stream-ciphers/tree/master/chacha20 [4]: https://github.com/RustCrypto/universal-hashes/tree/master/poly1305 [5]: https://research.nccgroup.com/2020/02/26/public-report-rustcrypto-aes-gcm-and-chacha20poly1305-implementation-review/ [6]: https://www.mobilecoin.com/ chacha20poly1305-0.10.1/src/cipher.rs000064400000000000000000000065670072674642500151460ustar 00000000000000//! Core AEAD cipher implementation for (X)ChaCha20Poly1305. use ::cipher::{StreamCipher, StreamCipherSeek}; use aead::generic_array::GenericArray; use aead::Error; use poly1305::{ universal_hash::{KeyInit, UniversalHash}, Poly1305, }; use zeroize::Zeroize; use super::Tag; /// Size of a ChaCha20 block in bytes const BLOCK_SIZE: usize = 64; /// Maximum number of blocks that can be encrypted with ChaCha20 before the /// counter overflows. const MAX_BLOCKS: usize = core::u32::MAX as usize; /// ChaCha20Poly1305 instantiated with a particular nonce pub(crate) struct Cipher where C: StreamCipher + StreamCipherSeek, { cipher: C, mac: Poly1305, } impl Cipher where C: StreamCipher + StreamCipherSeek, { /// Instantiate the underlying cipher with a particular nonce pub(crate) fn new(mut cipher: C) -> Self { // Derive Poly1305 key from the first 32-bytes of the ChaCha20 keystream let mut mac_key = poly1305::Key::default(); cipher.apply_keystream(&mut *mac_key); let mac = Poly1305::new(GenericArray::from_slice(&*mac_key)); mac_key.zeroize(); // Set ChaCha20 counter to 1 cipher.seek(BLOCK_SIZE as u64); Self { cipher, mac } } /// Encrypt the given message in-place, returning the authentication tag pub(crate) fn encrypt_in_place_detached( mut self, associated_data: &[u8], buffer: &mut [u8], ) -> Result { if buffer.len() / BLOCK_SIZE >= MAX_BLOCKS { return Err(Error); } self.mac.update_padded(associated_data); // TODO(tarcieri): interleave encryption with Poly1305 // See: self.cipher.apply_keystream(buffer); self.mac.update_padded(buffer); self.authenticate_lengths(associated_data, buffer)?; Ok(self.mac.finalize()) } /// Decrypt the given message, first authenticating ciphertext integrity /// and returning an error if it's been tampered with. pub(crate) fn decrypt_in_place_detached( mut self, associated_data: &[u8], buffer: &mut [u8], tag: &Tag, ) -> Result<(), Error> { if buffer.len() / BLOCK_SIZE >= MAX_BLOCKS { return Err(Error); } self.mac.update_padded(associated_data); self.mac.update_padded(buffer); self.authenticate_lengths(associated_data, buffer)?; // This performs a constant-time comparison using the `subtle` crate if self.mac.verify(tag).is_ok() { // TODO(tarcieri): interleave decryption with Poly1305 // See: self.cipher.apply_keystream(buffer); Ok(()) } else { Err(Error) } } /// Authenticate the lengths of the associated data and message fn authenticate_lengths(&mut self, associated_data: &[u8], buffer: &[u8]) -> Result<(), Error> { let associated_data_len: u64 = associated_data.len().try_into().map_err(|_| Error)?; let buffer_len: u64 = buffer.len().try_into().map_err(|_| Error)?; let mut block = GenericArray::default(); block[..8].copy_from_slice(&associated_data_len.to_le_bytes()); block[8..].copy_from_slice(&buffer_len.to_le_bytes()); self.mac.update(&[block]); Ok(()) } } chacha20poly1305-0.10.1/src/lib.rs000064400000000000000000000241220072674642500144250ustar 00000000000000#![no_std] #![cfg_attr(docsrs, feature(doc_cfg))] #![doc = include_str!("../README.md")] #![doc( html_logo_url = "https://raw.githubusercontent.com/RustCrypto/meta/master/logo.svg", html_favicon_url = "https://raw.githubusercontent.com/RustCrypto/meta/master/logo.svg" )] #![warn(missing_docs, rust_2018_idioms)] //! ## Supported Algorithms //! //! This crate contains pure Rust implementations of [`ChaCha20Poly1305`] //! (with optional AVX2 acceleration) as well as the following variants thereof: //! //! - [`XChaCha20Poly1305`] - ChaCha20Poly1305 variant with an extended 192-bit (24-byte) nonce. //! - [`ChaCha8Poly1305`] / [`ChaCha12Poly1305`] - non-standard, reduced-round variants //! (gated under the `reduced-round` Cargo feature). See the [Too Much Crypto][5] //! paper for background and rationale on when these constructions could be used. //! When in doubt, prefer [`ChaCha20Poly1305`]. //! - [`XChaCha8Poly1305`] / [`XChaCha12Poly1305`] - same as above, //! but with an extended 192-bit (24-byte) nonce. //! //! # Usage //! #![cfg_attr(all(feature = "getrandom", feature = "std"), doc = "```")] #![cfg_attr(not(all(feature = "getrandom", feature = "std")), doc = "```ignore")] //! # fn main() -> Result<(), Box> { //! use chacha20poly1305::{ //! aead::{Aead, AeadCore, KeyInit, OsRng}, //! ChaCha20Poly1305, Nonce //! }; //! //! let key = ChaCha20Poly1305::generate_key(&mut OsRng); //! let cipher = ChaCha20Poly1305::new(&key); //! let nonce = ChaCha20Poly1305::generate_nonce(&mut OsRng); // 96-bits; unique per message //! let ciphertext = cipher.encrypt(&nonce, b"plaintext message".as_ref())?; //! let plaintext = cipher.decrypt(&nonce, ciphertext.as_ref())?; //! assert_eq!(&plaintext, b"plaintext message"); //! # Ok(()) //! # } //! ``` //! //! ## In-place Usage (eliminates `alloc` requirement) //! //! This crate has an optional `alloc` feature which can be disabled in e.g. //! microcontroller environments that don't have a heap. //! //! The [`AeadInPlace::encrypt_in_place`] and [`AeadInPlace::decrypt_in_place`] //! methods accept any type that impls the [`aead::Buffer`] trait which //! contains the plaintext for encryption or ciphertext for decryption. //! //! Note that if you enable the `heapless` feature of this crate, //! you will receive an impl of [`aead::Buffer`] for `heapless::Vec` //! (re-exported from the [`aead`] crate as [`aead::heapless::Vec`]), //! which can then be passed as the `buffer` parameter to the in-place encrypt //! and decrypt methods: //! #![cfg_attr( all(feature = "getrandom", feature = "heapless", feature = "std"), doc = "```" )] #![cfg_attr( not(all(feature = "getrandom", feature = "heapless", feature = "std")), doc = "```ignore" )] //! # fn main() -> Result<(), Box> { //! use chacha20poly1305::{ //! aead::{AeadCore, AeadInPlace, KeyInit, OsRng, heapless::Vec}, //! ChaCha20Poly1305, Nonce, //! }; //! //! let key = ChaCha20Poly1305::generate_key(&mut OsRng); //! let cipher = ChaCha20Poly1305::new(&key); //! let nonce = ChaCha20Poly1305::generate_nonce(&mut OsRng); // 96-bits; unique per message //! //! let mut buffer: Vec = Vec::new(); // Note: buffer needs 16-bytes overhead for auth tag //! buffer.extend_from_slice(b"plaintext message"); //! //! // Encrypt `buffer` in-place, replacing the plaintext contents with ciphertext //! cipher.encrypt_in_place(&nonce, b"", &mut buffer)?; //! //! // `buffer` now contains the message ciphertext //! assert_ne!(&buffer, b"plaintext message"); //! //! // Decrypt `buffer` in-place, replacing its ciphertext context with the original plaintext //! cipher.decrypt_in_place(&nonce, b"", &mut buffer)?; //! assert_eq!(&buffer, b"plaintext message"); //! # Ok(()) //! # } //! ``` //! //! ## [`XChaCha20Poly1305`] //! //! ChaCha20Poly1305 variant with an extended 192-bit (24-byte) nonce. //! //! The construction is an adaptation of the same techniques used by //! XSalsa20 as described in the paper "Extending the Salsa20 Nonce" //! to the 96-bit nonce variant of ChaCha20, which derive a //! separate subkey/nonce for each extended nonce: //! //! //! //! No authoritative specification exists for XChaCha20Poly1305, however the //! construction has "rough consensus and running code" in the form of //! several interoperable libraries and protocols (e.g. libsodium, WireGuard) //! and is documented in an (expired) IETF draft, which also applies the //! proof from the XSalsa20 paper to the construction in order to demonstrate //! that XChaCha20 is secure if ChaCha20 is secure (see Section 3.1): //! //! //! //! It is worth noting that NaCl/libsodium's default "secretbox" algorithm is //! XSalsa20Poly1305, not XChaCha20Poly1305, and thus not compatible with //! this library. If you are interested in that construction, please see the //! `xsalsa20poly1305` crate: //! //! //! //! # Usage //! #![cfg_attr(all(feature = "getrandom", feature = "std"), doc = "```")] #![cfg_attr(not(all(feature = "getrandom", feature = "std")), doc = "```ignore")] //! # fn main() -> Result<(), Box> { //! use chacha20poly1305::{ //! aead::{Aead, AeadCore, KeyInit, OsRng}, //! XChaCha20Poly1305, XNonce //! }; //! //! let key = XChaCha20Poly1305::generate_key(&mut OsRng); //! let cipher = XChaCha20Poly1305::new(&key); //! let nonce = XChaCha20Poly1305::generate_nonce(&mut OsRng); // 192-bits; unique per message //! let ciphertext = cipher.encrypt(&nonce, b"plaintext message".as_ref())?; //! let plaintext = cipher.decrypt(&nonce, ciphertext.as_ref())?; //! assert_eq!(&plaintext, b"plaintext message"); //! # Ok(()) //! # } //! ``` mod cipher; pub use aead::{self, consts, AeadCore, AeadInPlace, Error, KeyInit, KeySizeUser}; use self::cipher::Cipher; use ::cipher::{KeyIvInit, StreamCipher, StreamCipherSeek}; use aead::{ consts::{U0, U12, U16, U24, U32}, generic_array::{ArrayLength, GenericArray}, }; use core::marker::PhantomData; use zeroize::{Zeroize, ZeroizeOnDrop}; use chacha20::{ChaCha20, XChaCha20}; #[cfg(feature = "reduced-round")] use chacha20::{ChaCha12, ChaCha8, XChaCha12, XChaCha8}; /// Key type (256-bits/32-bytes). /// /// Implemented as an alias for [`GenericArray`]. /// /// All [`ChaChaPoly1305`] variants (including `XChaCha20Poly1305`) use this /// key type. pub type Key = GenericArray; /// Nonce type (96-bits/12-bytes). /// /// Implemented as an alias for [`GenericArray`]. pub type Nonce = GenericArray; /// XNonce type (192-bits/24-bytes). /// /// Implemented as an alias for [`GenericArray`]. pub type XNonce = GenericArray; /// Poly1305 tag. /// /// Implemented as an alias for [`GenericArray`]. pub type Tag = GenericArray; /// ChaCha20Poly1305 Authenticated Encryption with Additional Data (AEAD). pub type ChaCha20Poly1305 = ChaChaPoly1305; /// XChaCha20Poly1305 Authenticated Encryption with Additional Data (AEAD). pub type XChaCha20Poly1305 = ChaChaPoly1305; /// ChaCha8Poly1305 (reduced round variant) Authenticated Encryption with Additional Data (AEAD). #[cfg(feature = "reduced-round")] #[cfg_attr(docsrs, doc(cfg(feature = "reduced-round")))] pub type ChaCha8Poly1305 = ChaChaPoly1305; /// ChaCha12Poly1305 (reduced round variant) Authenticated Encryption with Additional Data (AEAD). #[cfg(feature = "reduced-round")] #[cfg_attr(docsrs, doc(cfg(feature = "reduced-round")))] pub type ChaCha12Poly1305 = ChaChaPoly1305; /// XChaCha8Poly1305 (reduced round variant) Authenticated Encryption with Additional Data (AEAD). #[cfg(feature = "reduced-round")] #[cfg_attr(docsrs, doc(cfg(feature = "reduced-round")))] pub type XChaCha8Poly1305 = ChaChaPoly1305; /// XChaCha12Poly1305 (reduced round variant) Authenticated Encryption with Additional Data (AEAD). #[cfg(feature = "reduced-round")] #[cfg_attr(docsrs, doc(cfg(feature = "reduced-round")))] pub type XChaCha12Poly1305 = ChaChaPoly1305; /// Generic ChaCha+Poly1305 Authenticated Encryption with Additional Data (AEAD) construction. /// /// See the [toplevel documentation](index.html) for a usage example. pub struct ChaChaPoly1305 = U12> { /// Secret key. key: Key, /// ChaCha stream cipher. stream_cipher: PhantomData, /// Nonce size. nonce_size: PhantomData, } impl KeySizeUser for ChaChaPoly1305 where N: ArrayLength, { type KeySize = U32; } impl KeyInit for ChaChaPoly1305 where N: ArrayLength, { #[inline] fn new(key: &Key) -> Self { Self { key: *key, stream_cipher: PhantomData, nonce_size: PhantomData, } } } impl AeadCore for ChaChaPoly1305 where N: ArrayLength, { type NonceSize = N; type TagSize = U16; type CiphertextOverhead = U0; } impl AeadInPlace for ChaChaPoly1305 where C: KeyIvInit + StreamCipher + StreamCipherSeek, N: ArrayLength, { fn encrypt_in_place_detached( &self, nonce: &aead::Nonce, associated_data: &[u8], buffer: &mut [u8], ) -> Result { Cipher::new(C::new(&self.key, nonce)).encrypt_in_place_detached(associated_data, buffer) } fn decrypt_in_place_detached( &self, nonce: &aead::Nonce, associated_data: &[u8], buffer: &mut [u8], tag: &Tag, ) -> Result<(), Error> { Cipher::new(C::new(&self.key, nonce)).decrypt_in_place_detached( associated_data, buffer, tag, ) } } impl Clone for ChaChaPoly1305 where N: ArrayLength, { fn clone(&self) -> Self { Self { key: self.key, stream_cipher: PhantomData, nonce_size: PhantomData, } } } impl Drop for ChaChaPoly1305 where N: ArrayLength, { fn drop(&mut self) { self.key.as_mut_slice().zeroize(); } } impl> ZeroizeOnDrop for ChaChaPoly1305 {} chacha20poly1305-0.10.1/tests/data/wycheproof_chacha20poly1305.blb000064400000000000000000001212300072674642500223070ustar 00000000000000     !"#$%&'()*+,-./0123456789:;<=>? -@ e oo @!    6W3 |@68Q1P_@䌯v3'VFQ|,BfԼ MY; B.w\dbGCx p ߃M @ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_@ABCDEFGPQRSǀdLadies and Gentlemen of the class of '99: If I could offer you only one tip for the future, sunscreen would be it.4d`{S~¤Q)nⵧ6b=^giڒrq  )֥~;6ݽ-w( X$uUH1׼?KzveKa YO j~.`@1Ζ^q<;j*vBn@ MXR7 vB1f< 8<@zLY. MF"}Ec۹Wz%B.Pgd o(KR{sY˪uc @VU.PHKLPcjjvbs>ĉ`*":} hn֝u"@F%Iei+JpCR  ^Kp  qnQx/DlY,SQ"ElN?r@/~OY+It5>i_%F"4~\`$M9"TS{"@ȃ=^H 0+b y3Dq׫XaTkr 6O$ F.UX#w$7@ `u"M ,W ź$=p."Zҫ PT) !&ȕz*mX+Z.El8 E?&a %> .Y"@,Zt4_Esf`dxKNz%GbiL(hI%}T@Ww=}*E+T\f .yUr&qW :ũ(qQWƣ{jLl!;+@LO9#EG|.3\ ~5Gչ}Q ZY;*d"-Ì)L$%@$y`6i[-Wÿԝ!=k؀쎢pC"H5a x+ A*qFyCx۸I@ ,7l0C=k{&uB'Xj!Fˈ0 K\,QVP`kh3Ϳҟ@.h;5^,Ük8z TpÃ)~mRP o)'i,A{q̛Qt)|ω@UVXӦH?p!궛p?aBQJ7OZuh 7v4N >0)g_[MԠ6=S6MM`$3:m~nm@*p35Q6L, @FU {eY(z] c!@5.n=h#4`6xR3jRY$ר^c@+կ?? H9W< 9QYm^SVBYx\68}lFzkP3W'XN6m)@[b@ op1>oQWXԭ,J]Ɛ[Y8 8?Іl#/@t\e_ަ1vۧbn``O'H3::tD;? Qr+"y `@ `nSj8XÆEE _mbYstZz֯p`_\:P EC`:j.@G% .jx)UcwOMaL}zl}#P{f~<~ p[8 434PW,5OH:@~^ 0 Dh%Lcˎ#BReiWK?t#K&,+> )cS !B*4}gny @A?!yg84ج\O ĉ:XM[2C[jdS3c"FgѢs>2fģUtU0Njөj p9@YMۙK׳ ̍cigJ/8qG@ T6ZkU@V

,D$iSrW7Qwj(kD!j@lL8/=h@ha"]h;a/4.ك+@ߌY748ݲ$41Y DEl{t*q]{p>5]Ml4@5Vm4ҏ:cBQuͰf^]ʯ#Cވlq;&!\:oG8xвBxFT -2$ƋrN9B @HN9s2վ\/[Л뢝~NdJ&s5>pa >5ۚ$nF)M`7`8B/6_Shfٛ@B*7nL= jIx=jM#buB~g5/'(:'P?01 }He-Y^uO34xՒ5]%M"@?FׂGNr-wM #HoT$7aF^0QhF ("F:&90!uHFIw^Ǭm1}K|I Cvʳ@m/eC[]8u;9~l%^~2 |g}:*OT>y8ѸxHH;J>2sL?|fa2:% Ky yXX?@{BI#Jwz FV'vPb*Z-6@ 0Saګ*]>Wg.D(hCJ-HN0F>.M363)`n"3@C>(ϼJj8hm q=G 8l0Ìh,>`mԞ;M^Bt#sc$LKWu^#k5SIJiQCLu2H@ $B$JB+#4Yv"oq-)0vDeB*u,I~fC䲬Jl'RLLprS(>@ cG*i;O`@ 'ieo7vih)(K=ʄ$.7%*>ȖgWСKGNFI#̕bCY},G\KЈ @]@ (Ӷ$ZFj 0>1㿊ف`a9G !bA06AWE.'p,UIfEN8yQ@j!"JQ >UpTpi>n1q@P퇳?pOvΜ汭Xv,e0f]y7~iұPBlVK utdT~ԏ}uWW :@ż VVFڕOs# \D=Kыk(.Tx4U>ŭ0"Tm Lҟ%ˡP02C{Ki z䈞z <Pcӹl-UAe@`Nnpcg~62 S_o. Nx#2\\Έzy9_( w SR!HvUpW}4Lo܉Ӕ(Q@׊7̌8|3He*rE*"2iF |vt@Ra -ڱ}xBӱ5ò}*4j1~+64@jTۋ$'uĿˢJ'O#X.!J!ƅlױ@tArz(y*$=<(JV386?.ӡ4:7/nZ)u-7-m|Vy.uTyopCyURG'>GEi2+DE_<G̔@w$y] ) 24t:7g30t0Ҹ-:6 Ay'rV;|qYQVI}{OI} !90,P岩rl5V߾@Ə9Qf Q}^v4*O Q$"߀s6_m6H3ر8JuKzNh+5YY8VLW[>v*@K]se6Y9tn>*u}wA^ n/>wnn8un8ZqhY 3 XB\yub"ST#Y)C"]xs@Z }YsecR(j{^#6IF֭ꓸ-C2:<ybO8iy Lf'Z@#a@×ts,U=$K&i03gr,K@դ$ooaY:QqRQ/^Hr]'ASw(?:O5YG,{=*$#`oCnsZR+nlO_R}¥ǝe_9kMu]GW!f_@ ":۱퉷Xad97F3h Zl~Gx<6)Ӯa#6{CoEKbϭ\sʽ(,VTU&}WpZ !DXk@bW5 =A&Ƅt"&0Շ(К/ o\SOB̌ :N,*&bUU)^Eֵ:ԫvjHYRM,ء-FVm<1i_>Qe$@[t~ѴCX/@pe7񞤙G 327FnH>RURɫC_ò)9VnqV^F AG F'Xn&{pSMJZR-OG_@sXT 跆CpGW܌{5F4rl+~nj@Tj{NV`.]HWx`)6v_#JDPC ;!"%AFe3ƶ/@'`cp/a?4B& J[xj-E&(u4 Ѹ#3Y@k&l :RWlӼ^)ֹ~y5E`mcxTMMTB~])bo{}ɂpyLtb2@QU&`Y^[/YPE=/lK;~<B'4\O Ix?b+`zr[!DMd1LoϾa462W`7UjI@W? Ja;"K 2Uƙh8/R|öPm->V9閘$Y_Bf^? C*_Ńz󧜁K( L^b<bnz)bWѪ=Q'F3~S^IŢ /9J4fE2<@ @dN_QQe0"cEDĚx㠥dJQ^~! U^= u8&fϚ4.灞+q4kM, {F~&"l~.= wa=)RjC,e' _@$5iV:Q)z*@ld]L<@+ %Ts.ܲ4[1MF-^PMotw`E =^{ye6YuT.Egb!V@~v)$.8+nk>1aLR|ÓPsB@ף@[5~DGg %A M0R"ko@I(#[Ж1]]8ݬ@yd܏^gI!}n&xvULh]P仚 N+wu\G@\QrwgD,dKt3,r~#.~PBz2Vm@5utٙ]ӢUӒrR5~!u 뱜q#f3!mmnψ2Cq6]Bd5:%bDH ꗴQaFkҤh,NF6/E7c"`@vs0Bε4P#c>:)s](uԟ.}U:rQօ+kz{Uk m?$YWKJG 1vbuE9Q=wy >XK"~qM& ®Hm7uȐ/ =$$ЊP]c>ӈpn,6l|/khTa Dfǻ @׭8ߌ>+~VIHia[]_Lw:k(e`wkVr|n;pSۜoQ#Ru_Ơ{;}H*];1zTlk6RTuTI2 )JvL5?_On~tC^`SB1hS2hۚNve5Hqrp asW+>TGbnW]\S ѥ2q)MS!cx>] eI>tKW<@oě4(ʵvrjW91C<0GgIhq}a'`c.YrSهMv]>S;Q|qW+?X3&,#f4홮O+ITaK9Z݌l\15G)B[PihhGxF +( D=ߠVljXeb2wny9]C-+IyI>O߆zkȰW)d՗7V͏"l|R&Ђ#MT M`7FsivfrYZcո@}2rdP|I"w,<4_U!V ̪Dhn(@~rCt Bps#4Q@d2q^Ax6Qv++DKn,;>Y[:H hD3/zޭ@qWMm`s,+5?T.X@zYZӧd2|+7 ,6c C%ܿ|>³q b>kj3ǯ0@neƢSݕkC:J=S@.[Ǭ$B$/nAX rsLoA|M}:]@ 3vmW>h^@-<04dOSlY6-!{#"fSk@ ,#qϝa`hZҘ&%8g32 T iJ9xאC-i@S5W{&szQ?xZ8 H18}!M}@* |k)`C~kj}nL@{_adF: 4@QDj/bz\ލ@K,fi[ G֓Z 0}kb@T\I!0ܱ5-1 M^+?@u1!M\Wr]3Ӹ0v N{YҖ!Ub~Z (fS\~t@(Oʣ&@h|+=095y@ЩsՕRW(L;,Pod!5pΛ؆7fMO艔c ??v%Rᶵ,b^@rVV*ӥK4ʈ8;XnE"?xc@R 8#}@ }qyf!s47T!\ ao GFcy@,B9U p_Œ-?}f= @SOzFhD;FX)h`Oq,A,>xd9(f a5c /Э..9I@ЉĢU*JS1^s@Ξ@ }2M,C._2dR۩=zߙ%u#&lL n5`흚pSǐlH=@CWxCةl㝣T}cd`@4sE* 6NĔdgՉ)f9OoW:kI+eL/P+ɣ ??=#c4Hp@G@mV>_t+s9W۫f8+Xͥ@Uu\2 #u`Уe}Oc?,e.f GD$Zfw b;xP! oѯ@Lw*P Pۭ4Ye /@VriKbxCh$A .KvWVMI@h"џ-D  ײm2d@bҵá^5h35Y7"@V temcJB\:*+G)0߇~ϭ><^dp͙7D_ᔀ5*O`d Wy}j@)]?= 1KENј~I@t3*M8$0o$D/W*.(CdmԳ>*;A&IY^un#|i)`"p t ,u@_%8Gyvpм]@97jm Frثl pbh-&JmlX Q0Z3(j{vQ@Doo "Es}iMIU+7 ܞ-z@`[t`+xo 8#ِTkB"@67*x'F=ktNFekL@IB^qG@.WøVukhY.s ΄XY̌I}@{|$p2V,,+J #" C@y })/Zݚ hz,I}N's]^?-ԛ ֚xVf7tlX==\oBBja gGȞz,yP@ʂvg,DWcb]wO<>2%@e;t(9K "U%M?Ho `9mx|O%e;t(9K "U%M?Ho Bh2CCLq 1* `\:G;og%e;t(9K "U%M?Ho Bh2CCLq 1*D0͓X!=H `e^Aِi\V|̊ ~t&% \CNvpD+ͼkJqRc$uM =Rq /iT#IHm? J$ڲk[,3>vpD+ͼkJqRc$uM>|Pk)2lY·7aqwU*^&o^rJPY 3uH1_Iځ Q5c)‱-Uُ X /@e;pt(K Ub%M$?o`R TqGޯ/e;pt(K Ub%M$?o B~fh2ÔCL-q 12 @c-a2/e;pt(K Ub%M$?o B~fh2ÔCL-q 12D0X=H `e^ِ額V|LN ~6t&饁 T%AOEB־c+@;(9K@ "5UMHSo `zbn;+;(9K@ "5UMHSo B 2CCL 휱*  ty[ۻЮ˚Oe7+;(9K@ "5UMHSo B 2CCL 휱* /V0͓X!Hq `e*^A!ِi!\֯|& Ί~&% ʞ+'b[/)@IďHFme? ]J$ڲk7,3r`ǒbtn8i)IďHFme? ]J$ڲk7,3r>vpD+vpD+Pke)2Y^·7`agqw}U*>^&o^rJ#PoY uH_ɋZ CQ..K 2$-@I H ʪ$Zk[@3``RiLK/c-I H ʪ$Zk[@3_>pD+ͼ뼳gJqRcN$M p'avm@-I H ʪ$Zk[@3_>pD+ͼ뼳gJqRcN$M;>|k2lnYB7w*&orJ)P 3H1u_I ځ ԁ(wiֳ]qs1@e;HƒK? ݵUڲk[?H,3`a'+U[OZq1e;HƒK? ݵUڲk[?H,3 BvpDh2Ckc1*uM GVvNYX5(w1 1e;HƒK? ݵUڲk[?H,3 BvpDh2Ckc1*uMDPk0͓Y=H`qw^A^&o\PuH1 ~ځ *J(ԽOBST'@It(9m "J$%Mo ``Yt.l4R'It(9m "J$%Mo >+ͼCLJqRq $Պ - w'It(9m "J$%Mo >+ͼCLJqRq $Պ>|)2lX!·7 aeU*ِi^rJV|Y 3_It&% W%.z(B  @)Q@T2?D  @)Q@T2?D  t@)Q@T2?D  A)Q@T2?D  @7)Q@T2?D  @(Q@T2?D  @+Q@T2?D  @)Q@T2?D  @)Q@T2?D  @)Q@T2?D  @)P@T2?D  @)Q@U2?D  @)Q@V2?D  @)Q@T2?E  @)Q@T2?F  @)Q@T2?  @)Q@T2?  @)Q@T2?  %  #  @;<-H籥Z(@   @;<-H籥Z+@   @;<-H籥Z@   @;<-H籥Z)@   @;<-H籥Z)@   @;<-H籥Z)@   @;<-H籥Z)@   @;<-H籥Z)@S   @;<-H籥Z)@   @;<-H籥Z)@)  @;<-H籥Z)@   @;<-H籥Z)@   @;<-H籥Z)@   @;<-H籥Z)@   @;<-H籥Z)@   @;<-H籥Z)@ 駖  @;<-H籥Z)@ V  @;<-H籥Z)@S V  @;<-H籥Z  @;<-H籥Z  b;<-H籥ZFja8j.щg@ZNGΥ+z  b;<-H籥ZFja8j.щd@ZNGΥ+z  b;<-H籥ZFja8j.щ@ZNGΥ+z  b;<-H籥ZFja8j.щfAZNGΥ+z  b;<-H籥ZFja8j.щf@ZNGΥ+z  b;<-H籥ZFja8j.щf@ZNGΥ+z  b;<-H籥ZFja8j.щf@ZNGΥ+z  b;<-H籥ZFja8j.щf@ZN:GΥ+z  b;<-H籥ZFja8j.щf@ZNGΥ+z  b;<-H籥ZFja8j.щf@ZNGΥ+z  b;<-H籥ZFja8j.щf@ZNFΥ+z  b;<-H籥ZFja8j.щf@ZNGϥ+z  b;<-H籥ZFja8j.щf@ZNG̥+z  b;<-H籥ZFja8j.щf@ZNGΥ+{  b;<-H籥ZFja8j.щf@ZNGΥ+x  b;<-H籥ZFja8j.щf@ZNGΥ+:  b;<-H籥ZFja8j.щf@ZNGΥ+  b;<-H籥ZFja8j.щf@ZN:GΥ+  b;<-H籥ZFja8j.щ  b;<-H籥ZFja8j.щ܌&b~B8,qt.d{.8CXTYI>3;X){} CQG(i>✃~k54T(듳Qλw>Oc\9=D\ –CbFçij *js''Jгbbb{H |liq1AY<8ء$$8˝Fϕ VV{OX'[ʊ!衭5NT-05_Xy.&].fr5ԇ X Ha<_ 1#AR|Qx9;@F4}| ABYěLwK!#d(d2 ֤:t2D6gn>|JiUxE ܁ Gh ķ$ޛȲG+mgBC0VܔKjVQ8@a^X>0Cb{!MohV\+dw8AG}Y}PԚT$}R}v~GFgLe2epa(ԁ!z/x%s5)T/tGӇ1LeApCBf>bMIzcJ #sϢ$Djբ6{'< 7.E2ԝ>Do@r,ڲϓ\"0Z@VQmV 8ɥ})' VqS'I܈acOzFoE x-FJF8/w!MT|\zp _dxrG9 r~6G mζ-4ɩv3D_@wVRj5TXK}Sơ2kAm=CezJ\*  .As"JDL7ҵ) IlK9?#tMDYK;鹤~ [ځtQ(f}KڨS;HS;5+{N|&"p/}ŠAv(_xOVE۝#q &c~hrroR.G5GsG}஁s*~Taf|3~)=eBTMǃʘ.#5 X[=Tr/G3WxbᇜE1]~y^r~[U_Ŕ͹y*Ӡ0с%T:遞)hY~OLt6g 9Wli#!u!:JĻxZUA!2.=:T)ΔpP}vU{~|hZbU9dCŕ,<^gs>K!x~R~̪w5$ ؉F-*+F_9Y1hvm&sw+Ts~X̼L>B !uQec z`21lL3G±8 znm>"Xzw4O^%o zr~l3P`~d{mu? uYu9*T Q5Ʋ'm 5":2'w;Cof!B߿z4',I3Ѭ;'֝\P9Kà"Y k;b<}D$Iz9όC~"~_wy!OU D[i-GQsEjŒtݰQux@Ȋ"짹}rԗ PD|V+4=\qD/k4]CA}gk%'&TMTs W?~C\MX?,Ա@.pM#<3qÇJB1Yr-T ™H:@-_1Uv98K[':u ֆV6D(RV0V;wD;ѫN[e= E[^h N~ۆ1i:V a+ds`ׄ{:1"a<.|t׍x+r!@AWqUw2&  !@aZݵQP}; !@vN]}AHHOja !@+mӝ=K !@^ K # !@K>{~3#ȗklUQG(i>✃~k-8KHۑ`qJ5w6 0 _u0 _u5r'w&,QW;rd @nj&b~Bv X.8CXTYI>3s;I˄3Y{QG(i>✃~kyJnGD`Mz*JcV|{uPC֢J uPC֢J 4r7_[{\NkIs @&b~By@=#F.8CXTYI>3 Kkf}QG(i>✃~kAH xB^%8`2t + NZM*F:@M*F:@0rw.NZ @&b~B˸G}X w-"})8CXTYI>3dh)iT%VG(i>✃~k;P4x` k-v=vDūFb=vDūFb+rLJ7DͲ` @&b~B[nKF:5L28CXTYI>3 Lj)-lݵFMG(i>✃~k,̓T~'5Et`2<Wo* BQ3yV BQ3yV "rW (QS @&b~Bo$S^I@@08CXTYI>3=1W"uHXohOG(i>✃~k1;Yn|I>p2p`Ǩ+]q쭎 7]Iמ*!}7]Iמ*!}!rgH\3m` `VP_m[/]bU[#%`iioMN];ިvމ4QhWW]zjhWW]zj˰e>!%@ `ղ2Mq]rz΅>-Pݵ@62??(^@d"YgU·iAu@6Xnu@6Xnۘ& 0O @&b~B抒,UM},8CXTYI>3LݘS 1SG(i>✃~kF ӻ ku`MA#8] t9 JD^de JD^de WiԇEKz3 ܌&b~B.gWT= /5ȺK,4;5Z)#'͓N* ]WTg,jvޣ @&b~BLn&J%Wt]2r,8CXTYI>3d3Kiy8>at,qSG(i>✃~kh8EJҘ*s;+`?~)vߚp3gWfڅp3gWfڅg)כXs3aUA$vB,.?UG(i>✃~km_J*6%JGxqZe{`<z醠j!;S~l ^+4U<>S~l ^+4U<>g9cWKZCo @&b~Bʄ/p@ʽ,+8CXTYI>3(A<+WS*ӹTG(i>✃~k$J2ݭxÙZ}`-'ۨ*'*'p"(}SdBe @&b~B1i98gL=)8CXTYI>3G~>m+ VG(i>✃~kKtϩhKQ|`l;xEXU[y x UQ9x UQ9ð5ִ`oIIUw `+ Vqum`li64|T"d;8:T*06K=dܵ;fL&.2b;fL&.2b4_W<l70P b @&b~B|%]ߎ75((8CXTYI>3H8Q߷SWG(i>✃~kFmH) u`RbTe޻Xh7hSJՀޖlM SJՀޖlM 3o7X @ƌ&b~BzoIR 2~8CXTYI>3&VG7>{G(i>✃~k,-Bc>ROx` qJ5w6 } P.e_`.G6} P.e_`.G6QƀȥH!EE @ƌ&b~BtoIR 2~.8CXTYI>3셞fb LQG(i>✃~k狽d1GǂgG1`qJ5w6 \߯AS#-I\߯AS#-Iגf%Y 1 &b~BBQ)`U|41 'tH3#!B?Q@C 1&>!B[o5%bS]G8‰5%bS]G8‰g@}v`E]X-^ @&b~Bs31.18CXTYI>3b\ie6tpvշbG(i>✃~knVbkvaeZ-Gs`zL1`t"wz Z*ʲN d#C Z*ʲN d#C { |,2xO k?qc @܌&b~B 3ΠNU-8CXTYI>3[gSLyRG(i>✃~kQl.ܷIw#v`12ɔ;y}}]$$IȽmG}]$$IȽmG6r+S~?Oh @܌&b~BOHib̉+8CXTYI>3(:9Βx]TG(i>✃~k Vjψr`Dr@P˓c&!kzӵtC]Lj] zӵtC]Lj] 5r;(O_>JMVw @܌&b~B}ЎLXwalʻ)8CXTYI>3OW61RWVG(i>✃~kE;e4Lk ~`Zo  VdNXwIGſ5Xh@wIGſ5Xh@4rK]jP\Z] @Ȍ&b~Bk6F/LQP8CXTYI>3/kQ20Ьuw{G(i>✃~k#`_M9U{-q`#sbuW7 ߱(YNruqg ߱(YNruqg :r΄Qek @Ō&b~Bx<0,}"K8t8CXTYI>3"-#Yv@t OkkbG(i>✃~k.&-z=?,Q1q` *?@[ ҉n2іQ+`u] ҉n2іQ+`u] 6rEs,U ܌&b~B]/@+s \Kmg@yTUP2H#Lٮ\%ئ-HS .p_Yq:P'$TZP＠'$TZP IaR^ͭbsǂL ܌&b~B_!^}bdQJ vhncx"I͚2mcL3a ,I@3* 9Jle`pG(i>✃~k q>U 1:{`SkB7c,JvvΌfwc,JvvΌfw5rU$ Cޔ)*dQ @@^gL`N^9:a0#ÎG_N?ף%ET֭ xv\2MS1PsԄ,` cs ߏza>,P - `C63[~*9]M$` "QUj8J.>( i%+{x%ƺ/4K؃mU`A/4K؃mU`A>' zu4QV @f^gL`N^yu![$ lDG_N?ףmP-FˌWD,d\2MS1e#o Bޙy>B M a^gL`N^^gs^6f`5?ᳳӣIϒ82 I/Vlylm2S`PcR`PcRFm[э_'٧ d( RD!=yqCz+^qQeEeO5L 6b?~U~Ȥ='E6{ ̀@ ; yI@AuF ki>h-G]F ki>h-G]Ί=M}a=S @C^gL`N^{y[tZ4]TJG_N?ף1(CY+W!d\2MS1^jn )䚃-`wU~2kYa] gD] gD(QGou˕"Uf k^gL`N^4A*V Թ+K*eb&C@utX:(`;?A$ 3o,>TuB/\kWk#t u\kWk#t uߓQ\i >X ?5Ǫ(FJeqCz+^q: پ%YmS5L 6b?~qYgJ}'2e΀@ut5h_h~Thq㌀h_h~Thq㌀dG0fTa nLփVdqCz+^q]0K R5L 6b?~KFM]U@)π@`դ0ɔ(зw[E зw[E i$ Ѡ1Rry @O^gL`N^AV& G_N?ףjO?)[Ȅws\2MS1 m2`Qmnv&Zp 0-.)D{ &Zp 0-.)D{ >#!=_,]3- @f^gL`N^%7LT4'iG_N?ףXpHY;uuh\2MS1M ^G @L^gL`N^SW1J@oׁG_N?ף+AO:lk~xy|\2MS11Pt`"Tyo?gΘKsFgΘKsF,ú _C@ @f^gL`N^BZleG_N?ףIu}i3|E\2MS1@MZ~`oEQU hPo濵iCR>濵iCR>5>0OU2n Y/ A'}đ5B5nqCz+^qxI@kX5L 6b?~*d?u?h0.̀@nQ4V,ZG;$YW~a k;$YW~a k  B[Pi @B^gL`N^ a|4bUQBG_N?ףij\ڜԣm-d\2MS1_=Umj`fkpîdƠS>{5PƠS>{5PznRx  @K^gL`N^M DG G_N?ףdw[Ɵnt~a\2MS1Q@ş^[`kc =!5 ĨFVDwN#ĨFVDwN##/GSqy6~ @M^gL`N^n(KX0Lғ6J!>G_N?ף)ە:EaTur\2MS1ux9FWS`}ؤ2N &?:#&?:# .] Ž T]  @ޛȲG+mg(oyyQ ^VQ8@a^eNe3MohV<3Pʗoր`]eOltޛD.^h˪ٜ.^h˪ٜG)B9s6@p[- @ޛȲG+mg1 w/E2 `VQ8@a^pֱO &PG+MohV;Rr`9ڎ£L1 ڎ£L1 #,/z/&Il[= 1Z{N$kC0VܔKjc|} q>0Cb{z2ᠯm=À@wx՟P 4La,맆oPhK,맆oPhK ZtؔD 4ޛȲG+mgt~e1 QI@B"Uh(YZJm(rם#rz5 ɺ!ix7_Ձ齛qyW齛qyW!9Ԕg?0@  +QN^PPp5~BC0VܔKjYPةZG/ RcX>0Cb{5ΰ*]ZK@ 0y{D1(b4Yk\9k\9]j- x41|$ aeED5nOrC0VܔKjTqh>0Cb{g;1?q8"ɀ@l@r Zs.Pi_~΍ i_~΍ BHc_L͗4 atT_잩]pWcC0VܔKjCN^q[i ˍX y>0Cb{ogWzh ŀ@cJ/rAS,h R (rAS,h R (r0%V @ޛȲG+mgT0]ka w\5-\VVQ8@a^tܠ!;8MohV<\&OLր`E'C.i(.8Z(.8ZB=yMD5 @ޛȲG+mgK 8VQ8@a^5߁}w΀^3MohVKZ'92Z'92mF# HKĜ @ޛȲG+mg2:(|ETVQ8@a^`T\)ǐqu3i9MohV) @ޛȲG+mgvdI4ݒ|WVQ8@a^'[<h+=1MohV(`G:c{C ˒:c{C IȪfXQkZ @ޛȲG+mgFXs>\c%VQ8@a^R 9yB$MohV<賓jܼZ;dۀ`D<9V)|fd??[5||rk fd??[5||rk B,p`[!/ @ޛȲG+mg) EXVQ8@a^4 ɴZX.MohV5|<<-QힴVܝYVtj{>NL>Ï BI Yaܑڡbfsܑڡbfsaֽ+6& @ޛȲG+mg(oyyQ ^VQ8@a^dA=q.ڞ!MohV<~}@bE`]eOltޛD^V\x@otb^V\x@otb6pu9r?  @ޛȲG+mg(oyyQ ^VQ8@a^^xSAmi"a MohVDF.#u_\VQ8@a^6\A L%!MohV<'c7ll#6/ ;`'ٖ H: 95|m-n: 95|m-nѾt&Do.E35 @ޛȲG+mgJ*ţ 1^:VQ8@a^ޚaDFH7;̃$MohV_ךn O\sV>_ךnA+1vBo[1 @4ޛȲG+mgr+eIKC"TVQ8@a^lҎCTLsb!MohV<=gk$dW[`^"n`Io sCg* sCg*0Du@Kk[A =ޛȲG+mgblGVPu,8WnmGQ/4RÀ x%$&Ų}+a:!q)3Y{3Ga:!q)3Y{3G [b\ $ ޛȲG+mgf$)A$\o 63|#oO̠͂4#b5 ۣ^Nc:XC0VܔKjWF膼*$B>0Cb{[vuP%r wŀ@^cQH|VXA-=KDXA-=KDr }C- @ޛȲG+mgW?<}Lԣ:WVQ8@a^v/WvOm峁MohV7hS@Xvր`D߽iM8LykPz}`)e CN z}`)e CN c#}^Qvw @>ޛȲG+mgg/U*3qXVQ8@a^)#/) MohV<>2jDp|xsԀ`8AݶB<ۉM*nB<ۉM*n̴"_rd?6u[chacha20poly1305-0.10.1/tests/data/wycheproof_xchacha20poly1305.blb000064400000000000000000001145760072674642500225160ustar 00000000000000   !"#$%&'()*+,-./0123456789:;<=>? R 6  r!   @ `abcdefghijklmnopqrstuvwxyz{|}~@f62Ul%9l }Y?֛ۊ<tdS S13tczx{6ny @ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_0@ABCDEFGHIJKLMNOPQRSTUVWPQRSǀdLadies and Gentlemen of the class of '99: If I could offer you only one tip for the future, sunscreen would be it.m>;vW9W*%+̾Ґ,!9ls JD /N~9dpT˖.R/ Ei??+iHv85e!fLc}vƋ.Y$ǘyGޯx I@bG:0#UX^h}u^q|!XH @] l"Uc&O@0<.g)2*%gOg1808J 8> OzAb"EW4I?P C@i||#-,FqCeam|L0xSG:l0p-7{1j0 smM˺J/B@W$^,SgvNx@'4d3p&[Y},0Ol'8uFdN}@n2/~)$j,2'*4Gg@u?* H!' b;',l0s~>vi8ShN_ٍ*j&1a+tPT;@ü@ ߅?EܷLւx06df3zsi5S1kҪ>=G&G> 9 @pNPX&J)54N9m \T0|9Itf'm0N(-ۗaz{tl$@Y% #~xls$' j0N67ѐ®rϺU_eĶ y4`PR'8(!kx  @*^6N>ܸkኃ&vV#0{0IU6Ԕjf_Y ,L85**Џ✾_>x/W:En@H8"&]- fRyABG0̵C^`!9q9Yl\ԂB' Z@*]nWI<.Xעy@s|ڢG@Z`{އ$R(Eb9S0ɀjS[Ps_pU X1P,l0 목^B &J@|2^Y dUqV!N650\GrOt^7׵Ǐq0JW- S:,d89"@ үqUͪ[ֽ_%J-{`0 R="k>9hE 0}}x.?9SٚͫT쑧V3@7eqvr{. ǩucvEH0[m)A/jUoT E$Wi ̗ĞjJ=&ܗW.? 5n`6s0);@θe,Lچ)JJB ju0HL|Jy j5S`~n5 0[Yk(nGM $ !@Gynβ9BpwY5zSt_LH0GDU蜃ot3&wo]5v|:y~wjI0,Λb`Z@W׼?2#|RJ1VCpȅ0 0' ;uT1=pM:1727֖&Ox8_ݯtCYf{^@ ;k_ Fg_޶R [n7f0|yaM9k{gmAOawuG%x2\0ItY]r"ntjJ@!2i sG3\І4t=R0!6t_deM+i rU>d4dDXKC>@'\놈+t3u}bW5@֨03ߧ -ݩ i<-D4Um<0),84]_)dV&@-^Kf ͧb/2j$mڝuB=0ZD+m+R`e9DMDH6*A[7XDu|@p)\jm_#!c/~F0Yw:xMdyEh[׍T1Vif_~6[1@X0 DtK殇@1ᵬA߀dVW vGz0kئx#/CڂJ>Pɼ8Ry)E;O/DD&n*@J[ k>ID̵KNzR0@_vHwn:Xj8zW1UhWkZʫ3b8#E-dg6𕢋r8 b\@3+~ɿJ>*b{f>G(g0m$%7q2B7Hhp9zX ):%xQ (X0Iq5.@_~̤l6vS %a7@1P0%+ ?JjcF0+ܲíM'&5IvI:l1UroLc,}?``pX;~@+3/t1e,{A&'TxE/0ӛ<&45[;AAV9t$ac G<#KiH!-,#o^n'K@j!:25BZdς0%ܜ@|wIl. ̾~g-%><p/΄$F7rS!N@hm.Dw1j>X90U||N~Kטo#!g-%7]9)#V>Ū cJxwYΝoz@QFvsm4o-41G0ܥRHJfKc@E7N^|U9TN$V\<4>E?Vt_uBj^[8CY@jXFu*N/y ݣ' 0%'#ڧn{KQ#Cq`7 B gi,!Rx[}@s'\RsP1=@V%uJ;ljNR06gV>(.n0,YPd0;j0Hnb& QJ n 6>e@ ,WYI9uHZz06ZW/@;Fp߾ }Hb,xBďI0a5 eZdo=wɐ"T1>N/#23snB8kA9nXI\Eͺb)jr4,`1`@?o󇪖P.`F9(0epUS7Iѧv`## ;"앗N⹗9GqB2]P=:?bF٧LJ/ͬj@˪eLԭpA&"~~~)b0BUtta|nGS$ZZUC, x,U.Z#D@1kx%Js|WR_( $99vpqwnK)D-STV%VHp97%)}@ӑBP$]F,2EAZ_0tS&gpݜV6SZxmF{n_u9

{@Y n13֤j@71joҝ;0'+,3Ja@P@zB,@L<\q fLYYLiˆ iHQGc^"s╥eC3K@٪^蟞7%y&PNA,301X+mkn1~Gr@,. UmA-1Lա}8]]4bl)\֓5%ElL/Z@װx䍢/n2@qiƃ)0rv za f .DҗdgJɂ"մȲ8NLܒk:ctE@TM6cIUY@P@|׽ "@X8<˥?mN+0x-HƄwY(|+sZF^.)`M\\ Njс)Efwe:= yq,v5BgƏ2@;rHG4sc$^\c0"v֋%VKԳ07~>/ec=JےrBks~P ) ]přù̔G{ɅCڧ8@Sg#LȰ]VܢqwQ&T1k02FLf¼(~g _0 @8;|/5v|ܟPԍ%1gb_"OA%MW@'ZsKfQн&;Q2ΐ՜՝0XwjЉufh32eQZBx6>%K6Rfozn]Sg^,!xH]B66WN@MK 6(a7mL~ 4=$90(o%Ћ cqDs!ֿ])+y,2 g^IR6Zҏ\Dȳ|[mK5Z<^ VjA4 :@S5D)DZotF2&H0=(qκ[3 @.oT4>n\v˃sԑ^T=ؖ\1Q๯D\! |^~ (h@&a2ne&)rj#Oｵ0a@}M# fGb^Ex4w37bpCR XTzKDx"H*W5y,ٿQ Tۉ_@@ilG"m'+uGntDm擕ln0~L$$9dwLBj46;@mLuK#Y.lXV(,XbU??pI-3E{BG;5M=Xj]vwڛ,@m-|"Ѱ"y>u# [ 0&_K"A]RVK,L,G,t86v>u\ M@9W١^V-j>SDݽߴ_yWzB}a O#|DK@1HTQU#_ À0 Da\};\:8',ާXNXiwc9G T.X"H3.,B)l2Owy))D֬J@,4)w}>x!P8A %xi0m=@*?Xub<83=S[cŲQDR(XXBI{ubTNfK32#P@D&lo*E8Tp<O!W<8,Q*-0JPo磊V4T':P-5=Wp_=&+" ZV)fk,9/sLUd]익û hMPS@rNj@_[k>D5AGX>m00Wv"`c԰6I$+9O504isv aױ_}T}! >p%pı<ۤ*y8lCTiv8qS[*]V\=`h%''G3TzilHbVVV$V@v֋1&*U^Duw {}BOm0@ZU\Pӊ9=>5 ;exA^8>DyG,ݔOZtl73{nV:H|f@W` '⒒2rC76ªCZ10CΟ2];i?F] >J Qwɑ~Č7^1 ilT8 @.`hg(wُ̉=#t70@yԶ-.)gAX?@1Ŀ;Zx>a.8b2#ilL`Lx By(5ϊŠJdn h`ZgYD#Bdd@3(N뭴jRäSE̱0Cs/]\!MĭedqP3@c\ gW7"۳)P\`$Ϧ c,1%η0vk}FgYݧ#~;^@ H PcIn7-[M.Zg3gR0PٷqQ_.X@HGЪmBW]rV9SNBk[rPEMb#{"ոϝʡ3R;X+F)r47 hKnCR l@\' ELX3.briWGq0]5,˵݂ v#*B@B|qj[l_2Kq[ @S83fh2#b؝E OjQr<+$.Ka77K#@„OVUKw3Fӎν00d̟<46LA ^ pKoF#?Qo=)jԝkHe~LdPH؇ĜKD8rJB 0$sHIwmDrT"¦(-D/x(o@|rHގGAH#NY؁;+0{ȱki *eBkKq ^lB.6uy'hf g*Tt̎oHC D7~@ܼUX5@z7{z|@l5I1cl9?z)l}rQM@yH7Cc}P/-}=r;>=ǎ0R#c,av04UV*{@f *Ƞ;(<oUD3 GqR1'=Rᵀ vJKKWVOcpàR3ֲSx~7E i ܫFߐ65;:?[RH$j몖f'ю@PU 6`EYnu'HWD'Y?ŠW:0W~4ԁv5ޑvQMTQ܀TSΕuI=msiw)>up\`TRHXۇx/!{HhY uDqV*#1dJ?Zfly8=pe y'vcv s1-Ukж-@W Ҷ;gTȩ˔2ɸRXs<0m`A3U4L^oX9Bo|M74]-i5 C\F̐XY.)4;W<8&RyWZ3\d/T~NYkߊGn ~b&է[[͞nZ~M(mͬjDDg┽UgECX68;%6ZlCSvr[Oįܛє ָeIY?j098 @J;Ī| w$֎._!B=r1f{2ŽMQm{F<}XCENfX%=8{t!(y[EX ٵ߃ ٔ'r@.v{]|ɠXJҭ@T05LѦ2[;xru"VR!1wķʒO\#d~ntLKeL_9][kfbZ$ͺG0z+}^[^@Wzԙ-3mÖ|p`DŽ*UV>xe0tTU9r}n=M3 @ ` 6jL Tn!u}t:x0 Cjrs"ߐO&œl D/lM6F,Ȇ@%' Nw*Ria^S:@vBʋ!3y N!gT08<5^:F}Q%[D:{ n g6fh&@@;#txDh m:0k^@3]yk cn9j B?w) 9l0?UvGOk/atT:G^ ; ^E早.!Y@aBL/уhDLͷô26^7@ n֙WsKgսbw. ߵy?Y50ɑ|n+ŮLY)>r1}0PQ 0iV&EN#@%,(oVnD'3ok%w @݈]rhefeA-/B-~髢 0U\T!9Jdv)#1/O-Q _`ŽN^3\DX@δ$8@8 H |EXA\ҡD)@X#K=(Vi: R$[Q+pza70bh&:`YYN$NS f̊kB+SΏ@۲/:9j<9߈ڋ줇n;@'eeb2|@S-ɣڧT\A~A0٧kN)Oy Ä"w _t2 j6<2_z@IdftRRy}WNT\w-b}@Cx1 ,SJ@C5"5^·U|10t3 @~gTQGIt nw_BN}#Ϳ`}:D@!G$^ڡZb;G#䈗un:١@ի V3UsmA|0J3 4hʾT/>iUE_FFu Ϭ0iڒ@'܉yT;NXiCh׈x'@m9 ḪOrra6F:EHF@Qd+xG3 \fBM-fDۦ@#~VyK61uC/s.:>U0/tsEI # bI6tΪ2@όJ5ycdX Ag:s /g̫T@Xy6@tT9s D:g6?fAЪ$@clz z8AD&2n.LY>06T8ںes"-YyDBƟMʅl9b/$kx\cj!.;` Q3ܷ?"JJ!@^ZE>U E-Q1P/N?6,z@|d4:)8-AEj"Y 0;i8 c=a.&7VN^v .#}IpzmfȠʕgZ5!iԋq0w ._)D[D;C@^)U%C X\[{$Z(ָT|#@`⊏0ګy,fB|uHoƣ`R^߳=WvA#`⊏0ګy,fB|uHoƣVrb)ovh[)r*qH-6; 2*E9ad#`⊏0ګy,fB|uHoƣVrb)ovh[)r*qH-6;@},7(u8mHeb#]Y\Eu!Dsܢ}S,îǻJ%bBƴyQ2: g9".X+@`ګygfY|uHo#`+yVi+`ګygfY|uHo#V rbovh)*q=H&-6 7}:/+`ګygfY|uHo#V rbovh)*q=H&-6@}7(8me]Y\EuS7!Ds\SîǻJ%bBFyKQ2Ϛ ;5tju'7<<)@upR ϥT Z?m&479\` @(a)upR ϥT Z?m&479\a6s XVZgU/BdYRɀĀ XAXor¢))upR ϥT Z?m&479\a6s XVZgU/BdYRɀaonn? x ׊G>m!s"}:S,CǻCJ%[bB4y2: ZnEY[B\k-@`⊏vR ګy,k fB(?m&|u9\`h)%sҩ,-`⊏vR ګy,k fB(?m&|u9\VXovh[Zr/BHɀĀ pt-gVfc: ??-`⊏vR ګy,k fB(?m&|u9\VXovh[Zr/BHɀ x},U׊8mH!#}Euî8DgJ%$9yˮBŀ ebDs]Y\S,Rþ.h  >Rþ.h  >Rþ.h  >Rþ.h  g>Rþ.h  ?Rþ.h  R>.h  >Rþ/h  >Rþ.h  >Rþ.h  >Rþ.h  >Rþ.h  >Rþ.h  >Rþ.h  >Rþ.h  >Rþ.ha  >R>.ha  #  !  @1=^A6_^5$d6RP1  @1=^A6_^5'd6RP1  @1=^A6_^5d6RP1  @1=^A6_^5%e6RP1  @1=^A6_^5%dN6RP1  @1=^A6_^5%d6RP1  @1=^A6_^5%d6RP1  @1=^A6_^5%d6RP1  @1=^A6_^5%d6SP1  @1=^A6_^5%d6RP1  @1=^A6_^5%d6RP1  @1=^A6_^5%d6RP1  @1=^A6_^5%d6RP1  @1=^A6_^5%d6RP0  @1=^A6_^5%d6RP3  @1=^A6_^5%d6RPq  @1=^A6_^5%d6RP  @1=^A6_^5%d6RP  @1=^A6_^5  @1=^A6_^5  b1=^A6_^5xQyha@q߀A  b1=^A6_^5xQyha@q߀A  b1=^A6_^5xQyha@q߀A  b1=^A6_^5xQyh`@q߀A  b1=^A6_^5xQyha_@q߀A  b1=^A6_^5xQyha@q߀A  b1=^A6_^5xQyha@q߀A  b1=^A6_^5xQyha@q_A  b1=^A6_^5xQyha@q߁A  b1=^A6_^5xQyha@q߀A  b1=^A6_^5xQyha@q߀A  b1=^A6_^5xQyha@q߀A  b1=^A6_^5xQyha@q߀A  b1=^A6_^5xQyha@q߀A  b1=^A6_^5xQyha@q߀A  b1=^A6_^5xQyha@q߀AE  b1=^A6_^5xQyha@q߀A  b1=^A6_^5xQyha@q_A  b1=^A6_^5xQyh  b1=^A6_^5xQyh0 >u~㕽!.#IYjIz"#Vf?hs>lqDrjN3y^I+?|XY3*n͛`a?㵊 !|ymOS;HS;5+{N|&"p/}ŠAv(_xOV\ k '550 hrroR.G5GsG}஁s*~Taf|3~)=eBTMǃʘ.#5 X[=Tr/G3WxbᇜE1]~y^r~[M 6amR"P[X?ă3N. ?!b6 lLN4^3Qt 䮘:+ubX#Z@?E#ܸDV]LiQjPGRjX>́͹y*Ӡ0^ M藤ze:F00 ?!j6ɀ.XS;&=R\teT kMt$M%7NSGymm=W9B6_Xnwi`a֒2TMӫ^z7 ̹Axjv}l̪w5$ ؉F-*+F_9Y1hvm&sw+Ts~X̼L>B !uQec z`21lL3G±8 znm>"X  }}>K!lEډ0  zrl3P`~d{mu? uYu9*T Q5Ʋ'm 5":2'w;Cof!B߿z4',I3Ѭ;'֝\P9Kà"Y k;ҁ i7v>ǿvXp0 C"~_wy!OU D[i-GQsEjŒtݰQux@Ȋ"짹}rԗ PD|V+4=\qD/k4]CA}gk%'&TM ԻC]rw#0 ?C\MX?,Ա@.pM#<3qÇJB1Yr-T ™H:@-_1Uv98K[':u ֆV6D(RV0V;wD;ѫN[e=D LX ^/En<0 ՀV 2t T0X9l!, d941ݤeSkh;ULXn*_K;iʤS,5aSP*PB"Ҫv30x Oe)Xtvj3*C%*7B0N@34ϙCjsZu0ؼ媸Pr;QDZKةn@9.%o9 N8Sxno9 N8Sxnf̮^7qe 밗بex3*C%*7B0AzLS\tjsZu0ؼ媸P ~2v3:&@$bZ߂}4jcasGIjcasGI|i11h @0-}NUnx(|p5^h#L~fĢo%dZ 9+n3Gd;v'.sdW'[N=2XҀ` LXTؑ])O3,QhS)Y)O3,QhS)YiQbeHu  0-}NUu4I f2";ɘaL!v mZ|m̀ ?$߮@5^DA8SØ^DA8Sà8+l|U @ 0-}NUAbGYNqh#L~fĢown\pwJkZ Dd;v'.sd6Ν$eр`Fp7AIv39 $Հ!Ԉwqz $Հ!ԈwqzG%\c 0-}NU& ?u,A/}:vXU:ljH#ce6 8/ X+Jw؃ֽ]^8튩߁X,g 8튩߁X,g n){hκl &0-}NUtU8I&"4&K \6r( P jITPo oW:\?_o oW:\?_܍;㏎ 0-}NU-圝i8R)4sU&!Ie)NOS: A)I!B͡w!8^xL ҿ^xL ҿA H Pg%U @0-}NUf:h/h#L~fĢoF:3n9Od;v'.sd,x.;/W\%Ҁ`No@K {y^:<x1IUEx1IUE0k󿑦[{ UdvpÓ3*C%*7B0԰i-x jԃjsZu0ؼ媸P ix@&anq% R['@ gM6['@ gM6K~UX I=  yj&13*C%*7B0--*'-q~jsZu0ؼ媸P`&IX㍃]Uz@5=u3X uِZ N-^l pZ N-^l ph~& { @0-}NUaOz;h/i`Rh#L~fĢo֬gϩ\GJD Gd;v'.sd"Rۡms hЀ`LJ薯89d#` ѱ89d#` ѱ|DP;q- @w0-}NUtd/;S?h#L~fĢoQog=! /d;v'.sd@#ZDo ߋ>B?Ѐ`;fk~˩R熃F3ЇC_3ЇC_5V.zȆ @0-}NUǡ$}c,h#L~fĢoh `ε *{ d;v'.sd8qtƄON$v=Qр` t2O9*O[[1[S?kDz0<1[S?kDz0<1. '=2V % @0-}NUǡ$}ch#L~fĢo}pP9 t:n%:Jd;v'.sdeɻqM4cV` t2O9*O[[1S'ܜKE7 ;b65S'ܜKE7 ;b658Qg9"O#yֈ @0-}NU y j63d+Mh#L~fĢo8FU Z4 d;v'.sdJa'Rdc}rЀ`S`5*)PM .Džsd)PM .DžsdA}<6)` p׺8W w6AL_g3*C%*7B0{<Yn]jsZu0ؼ媸Pfwr7l_D@Ďȓ\usX>Ďȓ\ܶzy8Ì @0-}NUnmԼw.Ah#L~fĢo&R0Ch)<:Jd;v'.sdT5gW`V29|6`Y\iD}+T6[FޕH,j&}VFޕH,j&}V+4肍8 E: `(S&"E9GZVH\y[U(?'d7~D;:% O>ʩ:% O>ʩ>ZMiě?ހ 0-}NUDLUmB$5Z-W/bc5Ex~ry X(qczV-к*ݫ<1">-к*ݫ<1">i=u ۛV @0-}NUb7 fx h#L~fĢoN3 {3W ; bd;v'.sdQi{m'' Y} р`M&0&Km_L8\pM_|@L8\pM_|@lU-YM @ 0-}NUhe91z h#L~fĢo$;d @d;v'.sdX(0șUjр`FjȤflS*oh/Jg?~Iyh/Jg?~Iyz䁄uп @0-}NU{l`6h#L~fĢoũ @Y1 d;v'.sd۟­q`?cр`Y#~H8QA=A+#^XermB9_ ermB9_ L!ڿFfR: TkQ X :DŽ2 FQ܇gXcpߊ/ v#;0*zh Beళ0q٩y Beళ0q٩yŝ6NPmYk @TkQήwJA\rg ԜatCewm?Eq^LwyE:*Fr֧t)Rʁ< GXkqa'ug`VAHуtK f6d>Qf6d>QMB:& @TkQLFh})bԶvCewm?E#jE5^Dr֧t)R Zuv$kjPQ`6=UԿݱ-ɜ YдN84 YдN84ʻvEk3  @TkQIp =πoCewm?E8C;""]r֧t)R@"K̾ԔԴo`3A}]_:Ra+li| erg a+li| erg `APTS @TkQ"%:>ԕYχK߳xCewm?E]`&ӭF.Jr֧t)RCU.^Fj֐c`X^& nMoP:5jOJ#5jOJ#`nd\& `Ƒ/~`Dy@eD(̉MH)jx(3~C-;1<̠Di n6hzƉ }+i n6hzƉ }+Ь( &  TkQvʰYyQ@s5#(WidO1BlLӝ-ͲK G~D>,Y짆5l,Y짆5le-o{b򔫾X TkQN . .8ۂ}H1,+Dݟa. coH,J܌>Zg~X݌>Zg~Xݵ=!)@T?] @TkQ3Sl}Bh.'pCewm?EO]SK/Br֧t)Rb?#K 6b`cRurΠ5Ɂ (z Π5Ɂ (z  Ϥ"rm+ފv& TkQ'!lYHȆ2FE < &eTx6ᡀ Ќ0aHlr(Or֧t)RK =e`xL &MwOk#k(-%?oUk#k(-%?oU*ʾBh1<՝> @TkQ2V a0VCewm?EJEWKLb@\yY9vBԪAyY9vBԪAA?9鍞S @TkQD'?fóWCewm?EVOuP  er֧t)Rڀ SD88Nm`>yF#:gPAE5f ju[&AE5f ju[&^R!\Wbx @TkQN 74n5bkKCewm?E sFb.+)yr֧t)R$oͻBjd`4guNY;,>73thyXг{X73thyXг{Xe~ 1VZ. `U+|%E眚@#$ -)B%\'t/s3VgEbHjxT:X@ӳߑ:X@ӳߑ%T]6[ @i׀< \^Q56b)w0H:2(@V? RݲL04^TzqF|YuΤ*`w#-9d(`F=[Ew ^ ^OBr,# @u׀< \^Q5#.Ei&2(@V?{W `ɇ1W]TzqF|YuΤ\O'!pf(﵌2`Ò7 er̖NےxlȈ>NےxlȈ>dC2[2(u + @f׀< \^Q5_Mb'ݸpQ(2(@V?jnHIuQpU TzqF|YuΤMTzqF|YuΤ!ڧXU=tE`ezw19渭Fw19渭Fqc",KB @C׀< \^Q5aAI=T2(@V?5(wYZLJ.X4TzqF|YuΤzǣރ_3>`7+3qiHåk{MuAb&Tc^ {MuAb&Tc^ םCµI @n׀< \^Q5JGv]Z<25n=2(@V?c<+/ٴ5(\TzqF|YuΤD )|w`:o(Nq3 Q q7u!~ q7u!~Ηd6J,& @׀< \^Q5nΔ]H&B`S2(@V?1dc-2Fc^vTzqF|YuΤԟbZ4'`4;毁}j'z_$CB3|9z#ԓ$CB3|9z#ԓԎ3efBp'ׇ @j׀< \^Q5N%s1 2(@V?acrQ[8]6>X1TzqF|YuΤNL^`Dnu`>bqfppD4~O#a(x}sG~O#a(x}sG^uJeJp?ȃ `sXyȃa- /&S>U'zD~+vKsQ?B{['X kܻ$g76r!Luu&6r!Luu&lIt.%~FF `ڡĨ(R׸3Wk J_M) Y(v+kt$&.K`&.K`>zFIV @a׀< \^Q5 6]\ S1222(@V?,a^](J* C[TzqF|YuΤ s.҄s3%^`X} E.&0 ͝_09 Bl͝_09 Bl fp!dZr! @׀< \^Q5;s,+~4 8AO2(@V?w+bjn^jTzqF|YuΤZU[s*Nq`2, @7MyM!qz"MCM!qz"MCS3w(X_ @Z׀< \^Q5j'â!v;"p92(@V?\UhDU^TzqF|YuΤ׮q=y/}4[`"f#֤N#H*GhLi*GhLiy==EwW}L `2 Mr Z=/WO˱r{}]NEe@CeF(T ÌEdzúDB|[FúDB|[FqJ-G[ss! @i׀< \^Q56b)w0H2(@V?n /gg:ȃJ>TzqF|YuΤIk a ܴ#>h` F=[EwɷuBþZɷuBþZ)_2+Cs @i׀< \^Q56b)w0H^2(@V?}8u'LQZ{TzqF|YuΤ/QN>`hx`F=[Ewp<['Дʈp<['Дʈus>f̹0#1G ?\[{fNJ &l2)6<4JlS[K2(@V?աߞ/~0r)YXnTzqF|YuΤJv)9 Kt`iu-)ޗrdKyb7ҕ2b^FKyb7ҕ2b^Fa,x2Nl,6 @`׀< \^Q5UhEl7%H2(@V?g'uB^>TzqF|YuΤ5 :sy ?|K`o%hq𙃹h'Pp74`Lm0N74`Lm0Nĭ:LO3{% ׀< \^Q5: Ley*8٬}I 㕽,X 9rW#y8Yz9ؤH9~dH9~dDT%ҐB{ `"x3)FI3S'U_ky+^oN=1=VI!b$ #Z g=*fPg=*fPFudQO @]׀< \^Q5Ko"> 2(@V? ڴbS [.TzqF|YuΤ-nd-Ao`;VCwPúzl]zl]xr(ȫafw` @N׀< \^Q5ˤUޫpnx2(@V?氯$+w[;TzqF|YuΤ/2S`>@ ld4:o5 ld4:o5p[*";pdnG @q׀< \^Q5 LבG\ڠ^h I2(@V?wJƧc=_lTzqF|YuΤPgo#Z)bj`TzqF|YuΤ8<6hJX\`h2a*+BUٛ69t/(f -nv69t/(f -nvJfb?PjK l@ WV)9}NJ &]y]?r aS { #[test] fn encrypt() { let key = GenericArray::from_slice($key); let nonce = GenericArray::from_slice($nonce); let payload = Payload { msg: $plaintext, aad: $aad, }; let ciphertext = <$cipher>::new(key).encrypt(nonce, payload).unwrap(); let tag_begins = ciphertext.len() - 16; assert_eq!($ciphertext, &ciphertext[..tag_begins]); assert_eq!($tag, &ciphertext[tag_begins..]); } #[test] fn decrypt() { let key = GenericArray::from_slice($key); let nonce = GenericArray::from_slice($nonce); let mut ciphertext = Vec::from($ciphertext); ciphertext.extend_from_slice($tag); let payload = Payload { msg: &ciphertext, aad: $aad, }; let plaintext = <$cipher>::new(key).decrypt(nonce, payload).unwrap(); assert_eq!($plaintext, plaintext.as_slice()); } #[test] fn decrypt_modified() { let key = GenericArray::from_slice($key); let nonce = GenericArray::from_slice($nonce); let mut ciphertext = Vec::from($ciphertext); ciphertext.extend_from_slice($tag); // Tweak the first byte ciphertext[0] ^= 0xaa; let payload = Payload { msg: &ciphertext, aad: $aad, }; let cipher = <$cipher>::new(key); assert!(cipher.decrypt(nonce, payload).is_err()); } }; } // // Test vectors common to RFC 8439 and `draft-arciszewski-xchacha` // const KEY: &[u8; 32] = &[ 0x80, 0x81, 0x82, 0x83, 0x84, 0x85, 0x86, 0x87, 0x88, 0x89, 0x8a, 0x8b, 0x8c, 0x8d, 0x8e, 0x8f, 0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97, 0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f, ]; const AAD: &[u8; 12] = &[ 0x50, 0x51, 0x52, 0x53, 0xc0, 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7, ]; const PLAINTEXT: &[u8] = b"Ladies and Gentlemen of the class of '99: \ If I could offer you only one tip for the future, sunscreen would be it."; /// ChaCha20Poly1305 test vectors. /// /// From RFC 8439 Section 2.8.2: /// mod chacha20 { use super::{AAD, KEY, PLAINTEXT}; use chacha20poly1305::aead::generic_array::GenericArray; use chacha20poly1305::aead::{Aead, KeyInit, Payload}; use chacha20poly1305::ChaCha20Poly1305; const NONCE: &[u8; 12] = &[ 0x07, 0x00, 0x00, 0x00, 0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, ]; const CIPHERTEXT: &[u8] = &[ 0xd3, 0x1a, 0x8d, 0x34, 0x64, 0x8e, 0x60, 0xdb, 0x7b, 0x86, 0xaf, 0xbc, 0x53, 0xef, 0x7e, 0xc2, 0xa4, 0xad, 0xed, 0x51, 0x29, 0x6e, 0x08, 0xfe, 0xa9, 0xe2, 0xb5, 0xa7, 0x36, 0xee, 0x62, 0xd6, 0x3d, 0xbe, 0xa4, 0x5e, 0x8c, 0xa9, 0x67, 0x12, 0x82, 0xfa, 0xfb, 0x69, 0xda, 0x92, 0x72, 0x8b, 0x1a, 0x71, 0xde, 0x0a, 0x9e, 0x06, 0x0b, 0x29, 0x05, 0xd6, 0xa5, 0xb6, 0x7e, 0xcd, 0x3b, 0x36, 0x92, 0xdd, 0xbd, 0x7f, 0x2d, 0x77, 0x8b, 0x8c, 0x98, 0x03, 0xae, 0xe3, 0x28, 0x09, 0x1b, 0x58, 0xfa, 0xb3, 0x24, 0xe4, 0xfa, 0xd6, 0x75, 0x94, 0x55, 0x85, 0x80, 0x8b, 0x48, 0x31, 0xd7, 0xbc, 0x3f, 0xf4, 0xde, 0xf0, 0x8e, 0x4b, 0x7a, 0x9d, 0xe5, 0x76, 0xd2, 0x65, 0x86, 0xce, 0xc6, 0x4b, 0x61, 0x16, ]; const TAG: &[u8] = &[ 0x1a, 0xe1, 0x0b, 0x59, 0x4f, 0x09, 0xe2, 0x6a, 0x7e, 0x90, 0x2e, 0xcb, 0xd0, 0x60, 0x06, 0x91, ]; impl_tests!( ChaCha20Poly1305, KEY, NONCE, AAD, PLAINTEXT, CIPHERTEXT, TAG ); #[test] fn clone_impl() { let _ = ChaCha20Poly1305::new(GenericArray::from_slice(KEY)).clone(); } } /// XChaCha20Poly1305 test vectors. /// /// From mod xchacha20 { use super::{AAD, KEY, PLAINTEXT}; use chacha20poly1305::aead::generic_array::GenericArray; use chacha20poly1305::aead::{Aead, KeyInit, Payload}; use chacha20poly1305::XChaCha20Poly1305; const NONCE: &[u8; 24] = &[ 0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f, 0x50, 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57, ]; const CIPHERTEXT: &[u8] = &[ 0xbd, 0x6d, 0x17, 0x9d, 0x3e, 0x83, 0xd4, 0x3b, 0x95, 0x76, 0x57, 0x94, 0x93, 0xc0, 0xe9, 0x39, 0x57, 0x2a, 0x17, 0x00, 0x25, 0x2b, 0xfa, 0xcc, 0xbe, 0xd2, 0x90, 0x2c, 0x21, 0x39, 0x6c, 0xbb, 0x73, 0x1c, 0x7f, 0x1b, 0x0b, 0x4a, 0xa6, 0x44, 0x0b, 0xf3, 0xa8, 0x2f, 0x4e, 0xda, 0x7e, 0x39, 0xae, 0x64, 0xc6, 0x70, 0x8c, 0x54, 0xc2, 0x16, 0xcb, 0x96, 0xb7, 0x2e, 0x12, 0x13, 0xb4, 0x52, 0x2f, 0x8c, 0x9b, 0xa4, 0x0d, 0xb5, 0xd9, 0x45, 0xb1, 0x1b, 0x69, 0xb9, 0x82, 0xc1, 0xbb, 0x9e, 0x3f, 0x3f, 0xac, 0x2b, 0xc3, 0x69, 0x48, 0x8f, 0x76, 0xb2, 0x38, 0x35, 0x65, 0xd3, 0xff, 0xf9, 0x21, 0xf9, 0x66, 0x4c, 0x97, 0x63, 0x7d, 0xa9, 0x76, 0x88, 0x12, 0xf6, 0x15, 0xc6, 0x8b, 0x13, 0xb5, 0x2e, ]; const TAG: &[u8] = &[ 0xc0, 0x87, 0x59, 0x24, 0xc1, 0xc7, 0x98, 0x79, 0x47, 0xde, 0xaf, 0xd8, 0x78, 0x0a, 0xcf, 0x49, ]; impl_tests!( XChaCha20Poly1305, KEY, NONCE, AAD, PLAINTEXT, CIPHERTEXT, TAG ); }