[PATCH] Add support for Salsa20/12 - 12 round version of Salsa20

Werner Koch wk at gnupg.org
Mon Jul 29 21:34:49 CEST 2013

On Fri, 26 Jul 2013 21:12, simon at josefsson.org said:

> eSTREAM picked 12-rounds Salsa, and not the 20-round version, so it

I see.

> I would recommend against implementing 12-rounds without also
> implementing 20-rounds -- DJB specified 20-rounds and I would personally

Well, we implemented 20 rounds and not yet 12 rounds.

In how far is eSTREAM relevant; why do we need to care about it?

Is there any project already using Salsa20r12 or is there still time to
ignore this variant?  In other words, would you mind to change your I-D
to “Standard” 20 rounds Salsa?

It is not that I am against adding this variant, but I try to keep the
number of implemented algorithms low.  We already had to add a couple of
algorithms simply for political reasons.  I would appreciate if we could
avoid that (and thus make IanG happy).



Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.

More information about the Gcrypt-devel mailing list