Minor fixes for chacha comments and docs.

diff --git a/chacha-crypt.c b/chacha-crypt.c
index 0bb44ed919f74fd9998154e6a1a5bfeeecf75c60..1797bd02962545835c5170e6fa9f3aa86b2766ea 100644 (file)
--- a/chacha-crypt.c
+++ b/chacha-crypt.c
@@ -103,7 +103,7 @@ chacha_crypt32(struct chacha_ctx *ctx,
 
       ++ctx->state[12];
 
-      /* stopping at 2^70 length per nonce is user's responsibility */
+      /* stopping at 2^38 length per nonce is user's responsibility */
 
       if (length <= CHACHA_BLOCK_SIZE)
        {

diff --git a/nettle.texinfo b/nettle.texinfo
index 418f46d8a37d229c6f039bbaa3db5fc202c16b24..ff64889c4169e677270a1f95cab4e7130a6a1a69 100644 (file)
--- a/nettle.texinfo
+++ b/nettle.texinfo
@@ -3328,7 +3328,7 @@ defines a similar construction but with Salsa20 instead of ChaCha.
 Nettle's implementation of ChaCha-Poly1305 follows @cite{RFC 8439},
 where the ChaCha cipher is initialized with a 12-byte nonce and a 4-byte
 block counter. This allows up to 256 gigabytes of data to be encrypted
-using the same key.
+using the same key and nonce.
 
 For ChaCha-Poly1305, the ChaCha cipher is initialized with a key, of 256
 bits, and a per-message nonce. The first block of the key stream