From f53590f38b3f95b1ba1f81bd096aae0b625604ab Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Mon, 30 Jun 2014 20:52:46 -0700 Subject: [PATCH] More warnings about aes256estream --- .../sodium/crypto_stream_aes256estream.h | 17 +++++++++++------ 1 file changed, 11 insertions(+), 6 deletions(-) diff --git a/src/libsodium/include/sodium/crypto_stream_aes256estream.h b/src/libsodium/include/sodium/crypto_stream_aes256estream.h index c569b7af..d4978345 100644 --- a/src/libsodium/include/sodium/crypto_stream_aes256estream.h +++ b/src/libsodium/include/sodium/crypto_stream_aes256estream.h @@ -2,12 +2,17 @@ #define crypto_stream_aes256estream_H /* - * WARNING: This is just a stream cipher. It is NOT authenticated encryption. - * While it provides some protection against eavesdropping, it does NOT - * provide any security against active attacks. - * Furthermore, this implementation was not part of NaCl. - * Unless you know what you're doing, what you are looking for is probably - * the crypto_box functions. + * WARNING: This is just a stream cipher. It is NOT authenticated encryption. + * While it provides some protection against eavesdropping, it does NOT + * provide any security against active attacks. + * Furthermore, this implementation was not part of NaCl. + * + * If you are looking for a stream cipher, you might consider + * crypto_stream_aes128ctr, crypto_stream_chacha20 or crypto_stream_(x)salsa20 + * which are timing-attack resistant. + * + * But unless you know what you're doing, what you are looking for is probably + * the crypto_box or crypto_secretbox functions. */ #include