The Salsa20 family of stream ciphers

D.J. Bernstein

    Research output: Chapter in Book/Report/Conference proceedingChapterAcademic

    203 Citations (Scopus)
    1 Downloads (Pure)


    Salsa20 is a family of 256-bit stream ciphers designed in 2005 and submitted to eSTREAM, the ECRYPT Stream Cipher Project. Salsa20 has progressed to the third round of eSTREAM without any changes. The 20-round stream cipher Salsa20/20 is consistently faster than AES and is recommended by the designer for typical cryptographic applications. The reduced-round ciphers Salsa20/12 and Salsa20/8 are among the fastest 256-bit stream ciphers available and are recommended for applications where speed is more important than confidence. The fastest known attacks use ˜¿2153 simple operations against Salsa20/7, ˜¿2249 simple operations against Salsa20/8, and ˜¿2255 simple operations against Salsa20/9, Salsa20/10, etc. In this paper, the Salsa20 designer presents Salsa20 and discusses the decisions made in the Salsa20 design.
    Original languageEnglish
    Title of host publicationNew stream cipher designs: the eSTREAM finalists
    EditorsM. Robshaw, O. Billet
    Place of PublicationBerlin
    ISBN (Print)978-3-540-68350-6
    Publication statusPublished - 2008

    Publication series

    NameLecture Notes in Computer Science
    ISSN (Print)0302-9743

    Cite this