The wallet file is encrypted with chacha20. CN is used as KDF.

Old wallets (more than a few years old) were chacha8. They'll get converted as they're rewritten.

moneromooo: ok I knew CN was used somewhere in the process :D