RustCrypto: crypto_secretstream

Pure Rust implementation of [libsodium]'s [crypto_secretstream] primitive, providing an [AEAD] using [ChaCha20] and [Poly1305].

It is tested against [sodiumoxide], a Rust [libsodium] bindings.

Documentation

License

Licensed under either of:

• Apache License, Version 2.0
• MIT license

at your option.

Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.

Caveats

• auto-rekeying on counter overflow is not tested
• Tag::Final doesn't actually do anything, as [libsodium] does but not [sodiumoxide]
• Key and Nonce aren't zeroize, maybe it should
• MAC check in PullStream is not constant time