Hk
represents a keyed hash function that is safe against length-extension attacks, such as BLAKE2 or the HMAC construction.XChaCha20-Poly1305-IETF
is the safest choice.XChaCha20-Poly1305-IETF
yet.aesni
and pclmul
instructions.H(key || nonce || ciphertext_tag)
to the ciphertextcrypto_auth()
and crypto_auth_verify()
.