X25519 is an elliptic curve Diffie-Hellman function and doesn't take a nonce. If... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

bascule on March 25, 2016 | parent | context | favorite | on: On the Impending Crypto Monoculture

X25519 is an elliptic curve Diffie-Hellman function and doesn't take a nonce. If you're asking about ChaCha20... yes, which is why nonce reuse misuse resistance is an important theme of CAESAR.

tptacek on March 25, 2016 | [–]

Although, in fairness, misuse-resistance is a theme of EdDSA.

zaroth on March 25, 2016 | [–]

Sorry, don't know why I wrote that, I was thinking ChaCha20/Poly1305. OP picks on all the other AEAD modes for failing with nonce reuse, but doesn't mention it's actually the same failure mode with ChaCha20/Poly1305.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact