* except that an application should not mix nonce sizes with the same key.
* (It is possible to do this safely, but it requires detailed understanding
* of how everything fits together and isn't worth the effort.)
+ *
+ * The @salsa20_naclbox@ with a 192-bit nonce is exactly the scheme
+ * implemented in Bernstein's `NaCl' library as @crypto_secretbox@, except
+ * that it's flexible regarding tag placement rather than insisting on
+ * prefixing it to the ciphertext. Unlike NaCl, we provide a restartable
+ * interface, and allow the use of other ciphers and nonce lengths.
*/
#ifndef CATACOMB_LATINPOLY_H
extern const gcaead
chacha20_poly1305, chacha12_poly1305, chacha8_poly1305,
- salsa20_poly1305, salsa2012_poly1305, salsa208_poly1305;
+ chacha20_naclbox, chacha12_naclbox, chacha8_naclbox,
+ salsa20_poly1305, salsa2012_poly1305, salsa208_poly1305,
+ salsa20_naclbox, salsa2012_naclbox, salsa208_naclbox;
/*----- That's all, folks -------------------------------------------------*/