Loading CryptoViz...
Loading page content...Loading CryptoViz...
Loading page content...RFC 8439 AEAD combining the existing ChaCha20 and Poly1305 modules — the software-oriented alternative to AES-GCM, used by TLS 1.3 and WireGuard when hardware AES acceleration isn't available.
Save and restore visualizer settings in this browser.
Imported traces are validated and replayed locally. They never run a cipher operation automatically.
Continue your cryptography learning path
The 192-bit-nonce extension of ChaCha20 (used by libsodium) — an HChaCha20 subkey-derivation step, the ChaCha20 sibling of this batch's XSalsa20, lets you pick nonces randomly instead of managing a counter.
NIST-selected lightweight cryptography standard (SP 800-232, 2023). Authenticated encryption with associated data (AEAD) — encrypts and authenticates simultaneously using a 320-bit sponge permutation. Designed for IoT and constrained devices. Output = nonce + ciphertext + 128-bit tag.
Keyed-hash Message Authentication Code. Combines SHA-256 with a cryptographic secret key.
Related Resources