Monocypher

Designers

• ChaCha20: Daniel J. Bernstein.
• Poly1305: Daniel J. Bernstein.
• BLAKE2: Jean-Philippe Aumasson, Christian Winnerlein, Samuel Neves, and Zooko Wilcox-O’Hearn.
• Argon2: Alex Biryukov, Daniel Dinu, and Dmitry Khovratovich.
• X25519: Daniel J. Bernstein.
• EdDSA: Daniel J. Bernstein, Bo-Yin Yang, Niels Duif, Peter Schwabe, and Tanja Lange.

Implementors

• ChaCha20: Loup Vaillant, implemented from spec.
• Poly1305: Loup Vaillant, implemented from spec.
• BLAKE2b: Loup Vaillant, implemented from spec.
• Argon2i: Loup Vaillant, implemented from spec.
• X25519: Daniel J. Bernstein, taken and packaged from SUPERCOP ref10.
• EdDSA: Loup Vaillant, with bits and pieces from SUPERCOP ref10.

Test suite

Designed and implemented by Loup Vaillant, using libsodium (by many authors), and ed25519-donna (by Andrew Moon —floodyberry).

Manual

Loup Vaillant, Fabio Scotoni, and Michael Savage.

• Loup Vaillant did a first draft.
• Fabio Scotoni rewrote the manual into proper man pages (and substantially changed it in the process).
• Michael Savage did extensive editing and proofreading.

Thanks

Fabio Scotoni provided much needed advice about testing, interface, packaging, and the general direction of the whole project. He also redesigned the monocypher.org style sheets.

Mike Pechkin and André Maroneze found bugs in earlier versions of Monocypher.

Andrew Moon clarified carry propagation in modular arithmetic, and provided advice and code that significantly simplified and improved Elligator2 mappings.

Mike Hamburg explained comb algorithms, including the signed all-bits-set comb described in his 2012 paper, Fast and compact elliptic-curve cryptography. This made EdDSA signatures over twice as fast.

Samuel Lucas found many typos in both the manual and the website.

Jens Alfke added some #ifdefs that enabled Monocypher to compile into a C++ namespace, preventing symbol collisions with similarly-named functions in other crypto libraries.