Salsa12 is in eStream portfolio. How many random bits one can generate in Salsa12 using single key? Is it $512\times 2^{128}$?
Asked
Active
Viewed 190 times
1 Answers
2
Salsa20 (and its variants) has 512 bit blocks, a 64-bit counter and a 64-bit nonce. So it can produce $2^{64}$ independent streams consisting of $512 \cdot 2^{64}$ bits each, for a total of $512 \cdot 2^{128}$ bits.

CodesInChaos
- 24,841
- 2
- 89
- 128