Jan. 26, 2023, 4:30 p.m. |

IACR News www.iacr.org

ePrint Report: The Security of ChaCha20-Poly1305 in the Multi-user Setting

Jean Paul Degabriele, Jérôme Govinden, Felix Günther, Kenneth G. Paterson


The ChaCha20-Poly1305 AEAD scheme is being increasingly widely deployed in practice. Practitioners need proven security bounds in order to set data limits and rekeying intervals for the scheme. But the formal security analysis of ChaCha20-Poly1305 currently lags behind that of AES-GCM. The only extant analysis (Procter, 2014) contains a flaw and is only for the single-user setting. We rectify this …

aead aes analysis chacha20 data eprint report flaw order paul practice report security security analysis

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Sr. Product Manager

@ MixMode | Remote, US

Corporate Intern - Information Security (Year Round)

@ Associated Bank | US WI Remote

Senior Offensive Security Engineer

@ CoStar Group | US-DC Washington, DC