poly1305

package
v1.0.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 24, 2025 License: MIT Imports: 3 Imported by: 0

Documentation

Index

Constants

View Source
const TagSize = 16

TagSize is the size, in bytes, of a Poly1305 authenticator.

Variables

This section is empty.

Functions

func Sum

func Sum(out *[TagSize]byte, m []byte, key *[32]byte)

Sum generates an authenticator for msg using a one-time key and puts the 16-byte result into out. Authenticating two different messages with the same key allows an attacker to forge messages at will.

func Tag

func Tag(polyKey [32]byte, ad, ciphertext []byte) [TagSize]byte

Tag computes the Poly1305 authenticator over the ChaCha20-Poly1305 layout (AAD || padding || ciphertext || padding || len(AAD) || len(ciphertext)). The polyKey must be the one-time key derived from the cipher stream.

func Verify

func Verify(mac *[TagSize]byte, m []byte, key *[32]byte) bool

Verify returns true if mac is a valid authenticator for m with the given key.

Types

type MAC

type MAC struct {
	// contains filtered or unexported fields
}

MAC is an io.Writer computing an authentication tag of the data written to it.

MAC cannot be used like common hash.Hash implementations, because using a Poly1305 key twice breaks its security. Therefore writing data to a running MAC after calling Sum or Verify causes it to panic.

func New

func New(key *[32]byte) *MAC

New returns a new MAC computing an authentication tag of all data written to it with the given key.

func (*MAC) Size

func (h *MAC) Size() int

Size returns the number of bytes Sum will return.

func (*MAC) Sum

func (h *MAC) Sum(b []byte) []byte

Sum computes the authenticator of all data written to the message authentication code.

func (*MAC) Verify

func (h *MAC) Verify(expected []byte) bool

Verify returns whether the authenticator of all data written to the message authentication code matches the expected value.

func (*MAC) Write

func (h *MAC) Write(p []byte) (n int, err error)

Write adds more data to the running message authentication code. It never returns an error. It must not be called after the first call of Sum or Verify.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL