Chacha20-Poly1305

no_std support

This crate supports no_std targets, but requires the presence of a global allocator.

Verification

This crate contains safe Rust that was compiled from verified C originating in the HACL* project.

The code for [these] algorithms is formally verified using the F* verification framework for memory safety, functional correctness, and secret independence (resistance to some types of timing side-channels). -- The HACL* repository

For more details on the compilation from C to Rust, please refer to "Compiling C to Safe Rust, Formalized" by Aymeric Fromherz and Jonathan Protzenko.

NOTE: The XChacha20Poly1305 wrapper has not been formally verified yet.