Skip to content

AEAD (High-Security)

[!NOTE] This document is partially generated by AI.

The AEAD (Authenticated Encryption with Associated Data) is a security layer used to provide both confidentiality and authenticity for proxy traffic. It is typically used as a wrapper for other protocols.

  • TCP: Supported natively.
  • UDP: Supported natively.
  • password (string): The secret key used for encryption and authentication.
  • crypto_method (enum): The cryptographic algorithm to use.
    • Chacha20Poly1305
    • XChacha20Poly1305

AEAD is typically used as a wrapper for other protocols when they need an extra layer of strong encryption but don’t need the complexity of a full-featured protocol like Shadowsocks or TLS.


The AEAD implementation provides strong data integrity and confidentiality. It is found in pkg/net/proxy/aead.

Both Chacha20Poly1305 and its extended-nonce variant XChacha20Poly1305 are considered state-of-the-art and highly secure.