The eSTREAM Project - eSTREAM Phase 3

Salsa20 (Phase 3 Profile 1)

This is the archived eSTREAM Phase 3 page of Salsa20. For the latest information on Salsa20, please go to the eSTREAM portfolio page on Salsa20 here

Algorithm Name: Salsa20
Submitters : Daniel J. Bernstein
Type of Algorithm : Synchronous Stream Cipher
Proposed Environment : Profile 1 (SW) and 2 (HW)
Intellectual Property : Free for any use. statements
Algorithm Description :
- Article : zip
- Submitted C code: zip
- API-compliant C code: link
Archived Pages: Phase 2 page and Phase 1 page
Cryptanalysis :
- Paul Crowley, "Truncated differential cryptanalysis of five rounds of Salsa20", pdf, submitted 2005-12-25. (An error in the paper was reported in the forum.)
- Simon Fischer, Willi Meier, Côme Berbain, Jean-François Biasse, Matthew J. B. Robshaw, "Non-randomness in eSTREAM Candidates Salsa20 and TSC-4." Progress in Cryptology - INDOCRYPT 2006, LNCS 4329, pp. 2-16.
- Yukiyasu Tsunoo, Teruo Saito, Hiroyasu Kubo, Tomoyasu Suzaki and Hiroki Nakashima, "Differential Cryptanalysis of Salsa20/8", pdf, submitted 2007-01-02.
Software Performance : link
Other Articles :
- Daniel J. Bernstein, "Notes on the Salsa20 key size", pdf, submitted 2005-10-03.
- Daniel J. Bernstein, "Salsa20/8 and Salsa20/12", pdf, submitted 2006-02-08.
- Daniel J. Bernstein, "Response to 'On the Salsa20 core function'", pdf, submitted 2008-02-24.