Repository navigation

XOF extends Hash: SHAKE128 and SHAKE256 are hashes, and squeezing gets its own type - #118

Merged

dghgit merged 93 commits into

feature/simple-ciphersfrom

feature/xof-cshake

Sep 28, 2026

Commits on Sep 16, 2026

core, sha3: XOF extends Hash, so SHAKE128 and SHAKE256 are hashes; squeezing becomes its own type
dghgit
committed
4053f21
sha3: pin the SHAKE block_bitlen and output_len values, which three mutants survived
dghgit
committed
86819d7
core: XofOutput gains do_final and do_final_out, matching BC Java's doFinal after doOutput
dghgit
committed
24ae9b4
sha3: add cSHAKE128 and cSHAKE256 (SP 800-185 Sec 3) with the Sec 2.3 encodings and cshake CLI subcommands
dghgit
committed
517cd59
docs: record the cargo mutants scoping flags, the bc-test-data conventions and the commit message style in CLAUDE.md
dghgit
committed
61d3d8e
sha3: add KMAC128 and KMAC256 (SP 800-185 Sec 4) with KMACXOF, MACFactory registration and kmac CLI subcommands
dghgit
committed
63ca433
core: drop the Default supertrait from Hash, so keyed constructions can implement it
dghgit
committed
3adbfc1
sha3: KMACXOF128 and KMACXOF256 as keyed XOFs, now that Hash no longer requires Default
dghgit
committed
b1fff3c
core-test-framework: the XOF suite takes a constructor closure, so keyed XOFs can use it
dghgit
committed
9efbf5f
sha3: add TupleHash and TupleHashXOF (SP 800-185 Sec 5), where each update appends one tuple element
dghgit
committed
3913b55
sha3: add ParallelHash and ParallelHashXOF (SP 800-185 Sec 6), completing the Recommendation
dghgit
committed
90bd179
cli: add tuplehash and parallelhash subcommands, completing SP 800-185 on the command line
dghgit
committed
5c6302a
sha3: pin the Hash and XOF trait views of TupleHash, ParallelHash and KMAC against the sample values, plus KMAC's key-type and buffer-length checks; kills the 88 mutants the SP 800-185 suites had m…
dghgit
committed
68a3dbc
factory: replace the todo stub in xof_factory_tests with a differential suite against the SHAKE types; of 29 missed mutants only the equivalent default_128_bit one survives
dghgit
committed
50c125b
core: Hash gains Clone as a supertrait, so a hash mid-stream can be forked and finished several ways from one absorbed prefix; the SP 800-185 types and the factory enums derive it, the sha2 and sha…
dghgit
committed
b95dd0c
core: XOF gains default hash_xof and hash_xof_out bodies so only SHAKE overrides them, XofOutput is renamed XOFOutput to match the spec capitalisation used everywhere else, Hash::output_len documen…
dghgit
committed
6707002
core-test-framework: add test_hash_output_buffers, a closure-built Hash suite covering short, exact and over-long output buffers, for the implementors that take constructor arguments and so cannot …
dghgit
committed
b466d95
sha3: TupleHash and ParallelHash panicked on an output buffer shorter than output_len instead of truncating, and neither they nor KMAC zeroized past the digest as the Hash and MAC contracts require…
dghgit
committed
0e8b2f7
core: drop XOFOutput::do_final and do_final_out, which no implementor overrode and nothing outside their own tests called; a squeeze has nothing to finalize, so ending the stream is dropping the va…
dghgit
committed
ad3fa52
core, core-test-framework, sha3, factory, mldsa, mlkem, cli: rename the XOF squeezing vocabulary, so XOFOutput becomes XOFSqueezer with SHAKEOutput and XOFFactoryOutput following it, XOF::Output be…
dghgit
committed
8810ae7
core, core-test-framework, sha3: a final read of a XOF binds its output length, so XOFSqueezer gains do_final and do_final_out, KMACXOF, TupleHashXOF and ParallelHashXOF defer their right_encode(L)…
dghgit
committed
0a2bb8f
CLAUDE.md: record the cargo mutants mechanics this repo needs, since a bare run examines only the root package and finds nothing, the checked-in config's examine_globs silently overrides -f, crates…
dghgit
committed
8a46683

Commits on Sep 17, 2026

Commits on Sep 18, 2026

Remediated documentation and test concerns (#119)
officialfrancismendoza
committed
386bbe3

Commits on Sep 19, 2026

Commits on Sep 20, 2026

Commits on Sep 21, 2026

Merge branch 'feature/simple-ciphers' into feature/xof-cshake
dghgit
committed
8a13369
Merge branch 'feature/xof-cshake' into feature/officialfrancismendoza/119-core-aead-cipher

dghgit
and
claude
committed
ac72292
docs: fix contributing typos
officialfrancismendoza
committed
62e6a2b

Commits on Sep 22, 2026

Commits on Sep 24, 2026

core, core-test-framework, ascon, cli: make AEADCipherEncryptor/AEADCipherDecryptor extend SymmetricCipherEncryptor/SymmetricCipherDecryptor, with the detached-tag methods named *_detached and the …

dghgit
and
claude
committed
336f9cb
ascon: add Ascon_AEAD128<Dir>, naming the AEAD pair by direction

dghgit
and
claude
committed
2eb7a99
Merge remote-tracking branch 'origin/feature/xof-cshake' into trial/ccm-on-aead-new
dghgit
committed
c89663a
Initial add of AES lightweight CCM mode (#125)

officialfrancismendoza
authored and
dghgit
committed
570ae03
core, modes: document why AEADCipherEncryptor/Decryptor were not reshaped for CCM

officialfrancismendoza
authored and
dghgit
committed
5d5cf5c
cli: --nonce-file for CCM reads raw bytes only, never hex-decodes

officialfrancismendoza
authored and
dghgit
committed
3dd3266
modes, core: zeroize CCM's CBC-MAC state, and make BUFFER_LEN vs the payload limit a compile error

officialfrancismendoza
authored and
dghgit
committed
3be43fb
modes: batch CCM's CTR half, and fix docs that claimed it was impossible

officialfrancismendoza
authored and
dghgit
committed
e95a25b
cli: stop BlockModeAction's shared help from describing behaviour CCM doesn't have

officialfrancismendoza
authored and
dghgit
committed
9f437ab
cli: process CCM input in place instead of allocating a second buffer

officialfrancismendoza
authored and
dghgit
committed
4282833
modes: dedupe CcmEncryptor/CcmDecryptor over a shared CcmBuffer, drop the redundant key check

officialfrancismendoza
authored and
dghgit
committed
ac13ce0
modes: add a Wycheproof AES-CCM suite, move/drop CCM unit tests that used no private API

officialfrancismendoza
authored and
dghgit
committed
e877a32
modes: close the mutation-testing gaps the batching and buffer-boundary changes left

officialfrancismendoza
authored and
dghgit
committed
1b593c5
modes: adapt CCM buffer errors to the #120 API

officialfrancismendoza
authored and
dghgit
committed
afa2b3c
Fixed formatting with cargo fmt (#125)

officialfrancismendoza
authored and
dghgit
committed
8a24373
Remediated concerns. F1-F10 fixed except F9 (optional), which was left unchanged (#125)

officialfrancismendoza
authored and
dghgit
committed
24a646c
modes, aes, core-test-framework: port CcmEncryptor/CcmDecryptor to the AEAD traits that extend SymmetricCipherEncryptor/SymmetricCipherDecryptor, with FINAL_LEN replacing BUFFER_LEN

dghgit
and
claude
committed
67a7b45
Initial add of AES lightengine GCM mode (#124)

officialfrancismendoza
authored and
dghgit
committed
7a6e2a4
modes, aes, cli: follow the base branch's API renames in AES-GCM (#124)

dghgit
and
claude
committed
6bd4ed7
modes, aes, cli: implement AEADCipherEncryptor/AEADCipherDecryptor for GCM and make its inherent API private (#124)

dghgit
and
claude
committed
788fd06

Commits on Sep 25, 2026

Commits on Sep 26, 2026

Merge branch 'feature/simple-ciphers' into feature/xof-cshake

dghgit
and
claude
committed
77edc43

Commits on Sep 27, 2026

Commits on Sep 28, 2026