Re: ChachaPoly-03: Chacha20-Poly1305 AEAD construction as per RFC7634

[Damien Miller]

On Mon, 26 Oct 2015, Mike Belopuhov wrote:

> OK?

Will this get the nonce right on BE systems?

> +     /* initial counter is 1 */
> +     ctx->nonce[0] = 1;
> +     memcpy(ctx->nonce + CHACHA20_CTR, key + CHACHA20_KEYSIZE,
> +         CHACHA20_SALT);