Re: Status of Poly1305 and use of AES-NI in Poly1305, UMAC?

On Mon, Jan 20, 2014 at 10:12 PM, Niels Möller nisse@lysator.liu.se wrote:

nisse@lysator.liu.se (Niels Möller) writes:

...

Joachim Strömbergson joachim@secworks.se writes:

...

What is the status of Poly1305 in Nettle, i.e. is the branch ready to be merged into master

There are a couple of things I'd like to do. Quoting a mail from 21/11:

I've done most of this now, and merged into the master branch.

...

• Take out the nonce from struct poly1305_ctx, and let poly1305_aes do all nonce handling. poly1305_digest gets the encrypted nonce as argument.

Done.

Is the AEAD construction of poly1305 with chacha [0] planned to be included? It is currently intended to be used in TLS so it would be a really useful to have in nettle.

[0]. http://tools.ietf.org/html/draft-agl-tls-chacha20poly1305-04

regards, Nikos