|
|
@ -616,7 +616,7 @@ steps are completed:
|
|
|
|
* A zero-length byte slice is to be passed as the AD (associated data).
|
|
|
|
* A zero-length byte slice is to be passed as the AD (associated data).
|
|
|
|
* The nonce `rn` must be incremented after this step.
|
|
|
|
* The nonce `rn` must be incremented after this step.
|
|
|
|
4. Read _exactly_ `l + 16` bytes from the network buffer, and let the bytes be
|
|
|
|
4. Read _exactly_ `l + 16` bytes from the network buffer, and let the bytes be
|
|
|
|
known as `c`.
|
|
|
|
known pass:[<span class="keep-together">as <code>c</code></span>].
|
|
|
|
5. Decrypt `c` (using `ChaCha20-Poly1305`, `rn`, and `rk`) to obtain decrypted
|
|
|
|
5. Decrypt `c` (using `ChaCha20-Poly1305`, `rn`, and `rk`) to obtain decrypted
|
|
|
|
plain-text packet `p`.
|
|
|
|
plain-text packet `p`.
|
|
|
|
+
|
|
|
|
+
|
|
|
|