Hawkynt

Poly1305

One-time message authenticator designed by D.J. Bernstein using 130-bit field arithmetic. Provides information-theoretic security when used with unique keys.

Properties

Property	Value
Category	Message Authentication
Sub-category	Universal Hashing MAC
Security status	🎓 Educational Only
Complexity	Intermediate
Inventor	Daniel J. Bernstein
Year	2005
Origin	🇺🇸 United States
Source	algorithms/mac/poly1305.js

Parameters

Parameter	Supported values
MAC sizes	16 bytes (128 bits)

Capabilities

Flag	Value
NeedsKey	Yes

Security

Status: 🎓 Educational Only

No vulnerabilities are recorded for this implementation.

Documentation

• RFC 8439: ChaCha20 and Poly1305 for IETF Protocols
• D.J. Bernstein: The Poly1305-AES message-authentication code
• D.J. Bernstein: Poly1305-AES Specification (PDF)

References

• poly1305-donna - Andrew Moon Reference Implementation (GitHub)
• libsodium crypto_onetimeauth/poly1305 Implementation
• RFC 8439 Appendix A.3: Poly1305 Reference Code

Test vectors

1 vector ship with this algorithm and run in the test suite. Byte values are hexadecimal.

Vector 1 — RFC 8439 Section 2.5.2 - Cryptographic Forum Research Group

Field	Value
key	85d6be7857556d337f4452fe42d506a80103808afb0db2fd4abff6af4149f51b
input	43727970746f6772617068696320466f 72756d2052657365617263682047726f 7570
expected	a8061dc1305136c6c22b8baf0c0127a9

---

← All algorithms

This site is open source. Improve this page.