Joachim Strömbergson joachim@secworks.se writes:
Niels Möller wrote:
Done now. And I found and fixed one bug in chacha_crypt. When updating the block counter, it used the salsa20 state layout, not the chacha state layout.
Looking through the commits and docs... Holy cr-p! Yes, that was a bad bug. Good spotted!
I guess this is simply an example of the general observation that untested code often doesn't work as intended...
I have not the same bug in the generator for test vectors
That's good (and otherwise, the tests wouldn't have failed...). BTW, do you know of any other source of testvectors (even if not as extensive as the ones in your draft)?
Regards, /Niels