[cide1]

I studied that code and the comment for a good 10 minutes. As far as I can tell it just obfuscates, and is not actually implementing authenticated encryption. It would help to just come out and say that part out loud.

[tptacek]

True fact: Salsa20 is itself a hash function, keyed, and running in a counter mode.