Open The-King-of-Toasters opened 1 year ago
Yes, reduced-round Salsa was added specifically for this.
In scrypt, Salsa is applied to individual blocks, so I think one way to share code with salsa20
would be to:
hashFromBytes()
(to complement hashToBytes
)hashFromBytes()
, followed by salsaCore
, and hashToBytes()
.
The current scrypt implementation uses an 8-round variant of the non-vectorized Salsa cipher that already exists. Since the Salsa impls can take a
rounds
parameter, there should be a way to export an eight round cipher for the scrypt impl to use.I've tried attempting this in the past and given up since the different salsa impls aren't an exact match in functionality.