Yeah, Chacha20 would fail the same way if we used the same key *and* nonce for d... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

loup-vaillant on Jan 12, 2017 | parent | context | favorite | on: On the Impending Crypto Monoculture (2016)

Yeah, Chacha20 would fail the same way if we used the same key and nonce for different messages. I'm not sure what he was getting at.

s_tec on Jan 13, 2017 [–]

With Chacha20 the worst that can happen is plaintext recovery, which is a lot less bad than full key recovery.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact