Tags: salsa20 crypto 

Rating: 5.0

Reusing nonce + bad counter handling is *bad*

Original writeup (https://rot26.team/CTF/Hacklu/2017/crypto/salsa/).