spot-the-bug/stream-ciphers/monocypher-3.1.1/AUTHORS.md

Designers

• Chacha20: Daniel J. Bernstein.
• Poly1305: Daniel J. Bernstein.
• Blake2: Jean-Philippe Aumasson, Christian Winnerlein, Samuel Neves, and Zooko Wilcox-O'Hearn
• Argon2: Alex Biryukov, Daniel Dinu, and Dmitry Khovratovich
• X25519: Daniel J. Bernstein
• EdDSA: Daniel J. Bernstein, Bo-Yin Yang, Niels Duif, Peter Schwabe, and Tanja Lange

Implementors

• Chacha20: Loup Vaillant, implemented from spec.
• Poly1305: Loup Vaillant, implemented from spec.
• Blake2b: Loup Vaillant, implemented from spec.
• Argon2i: Loup Vaillant, implemented from spec.
• X25519: Daniel J. Bernstein, taken and packaged from SUPERCOP ref10.
• EdDSA: Loup Vaillant, with bits and pieces from SUPERCOP ref10 and TweetNaCl.

Test suite

Designed and implemented by Loup Vaillant, using libsodium (by many authors), and ed25519-donna (by Andrew Moon —floodyberry).

Manual

Loup Vaillant, Fabio Scotoni, and Michael Savage.

• Loup Vaillant did a first draft.
• Fabio Scotoni rewrote the manual into proper man pages (and substantially changed it in the process).
• Michael Savage did extensive editing and proofreading.

Thanks

Fabio Scotoni provided much needed advice about testing, interface, packaging, and the general direction of the whole project. He also redesigned monocypher.org style sheets.

Mike Pechkin and André Maroneze found bugs in earlier versions of Monocypher.

Andrew Moon clarified carry propagation in modular arithmetic, and provided advice and code that significantly simplified and improved Elligator2 mappings.

Mike Hamburg explained comb algorithms, including the signed all-bits-set comb described in his 2012 paper, Fast and compact elliptic-curve cryptography. This made EdDSA signatures over twice as fast.