James Cloos cloos@jhcloos.com writes:
I expect additional users to ignore that draft and use chacha as it was intended.
For plain chacha, I totally agree. Question is about the chacha-poly1305 construction.
But it shouldn't be too painful to support two nonce-sizes, as long as that's the only difference.
Regards, /Niels