Simon Josefsson simon@josefsson.org writes:
So you don't think we should implement the uint8_t interface now? I think there is little cost in doing that directly, and allows us to directly use the only test vectors that I'm aware of.
I don't have a strong opinion. If it helps testing, and we are confident that it should be little-endian, let's add it.
What's a good name? Is there any precedent for something like this in Nettle?
If we look at internal building blocks, there are a couple of examples: gcm_hash, and sha1_compress (and similar compression functions for other hashes). Neither of those are advertised/documented.
I think it would make sense to call the uint32_t function salsa_core, and the uint8_t function salsa_hash. We'll see if we can sort out what properties it really has, but it definitely has important similarities to a hash function.
Regards, /Niels