The design of Chacha20
> [re magic "expand 32-byte k" string] And it's readable ASCII text, so you can be pretty sure there's no back door in there.I am not sure this matters?I mean, facebook managed to get a reasonably nice .onion routing id (facebookcorewwwi.onion) by bruteforcing stuff right?I can imagine bruteforcing the "backdoor key space" to find something that looks good, am I insane?