XOF extends Hash: SHAKE128 and SHAKE256 are hashes, and squeezing gets its own type by dghgit · Pull Request #118 · bcgit/bc-rust

core, sha3: XOF extends Hash, so SHAKE128 and SHAKE256 are hashes; squeezing becomes its own type

dghgit

committed

4053f21

sha3: pin the SHAKE block_bitlen and output_len values, which three mutants survived

dghgit

committed

86819d7

core: XofOutput gains do_final and do_final_out, matching BC Java's doFinal after doOutput

dghgit

committed

24ae9b4

sha3: add cSHAKE128 and cSHAKE256 (SP 800-185 Sec 3) with the Sec 2.3 encodings and cshake CLI subcommands

dghgit

committed

517cd59

docs: record the cargo mutants scoping flags, the bc-test-data conventions and the commit message style in CLAUDE.md

dghgit

committed

61d3d8e

sha3: add KMAC128 and KMAC256 (SP 800-185 Sec 4) with KMACXOF, MACFactory registration and kmac CLI subcommands

dghgit

committed

63ca433

core: drop the Default supertrait from Hash, so keyed constructions can implement it

dghgit

committed

3adbfc1

sha3: KMACXOF128 and KMACXOF256 as keyed XOFs, now that Hash no longer requires Default

dghgit

committed

b1fff3c

core-test-framework: the XOF suite takes a constructor closure, so keyed XOFs can use it

dghgit

committed

9efbf5f

sha3: add TupleHash and TupleHashXOF (SP 800-185 Sec 5), where each update appends one tuple element

dghgit

committed

3913b55

sha3: add ParallelHash and ParallelHashXOF (SP 800-185 Sec 6), completing the Recommendation

dghgit

committed

90bd179

cli: add tuplehash and parallelhash subcommands, completing SP 800-185 on the command line

dghgit

committed

5c6302a

sha3: pin the Hash and XOF trait views of TupleHash, ParallelHash and KMAC against the sample values, plus KMAC's key-type and buffer-length checks; kills the 88 mutants the SP 800-185 suites had m…

dghgit

committed

68a3dbc

factory: replace the todo stub in xof_factory_tests with a differential suite against the SHAKE types; of 29 missed mutants only the equivalent default_128_bit one survives

dghgit

committed

50c125b

core: Hash gains Clone as a supertrait, so a hash mid-stream can be forked and finished several ways from one absorbed prefix; the SP 800-185 types and the factory enums derive it, the sha2 and sha…

dghgit

committed

b95dd0c

core: XOF gains default hash_xof and hash_xof_out bodies so only SHAKE overrides them, XofOutput is renamed XOFOutput to match the spec capitalisation used everywhere else, Hash::output_len documen…

dghgit

committed

6707002

core-test-framework: add test_hash_output_buffers, a closure-built Hash suite covering short, exact and over-long output buffers, for the implementors that take constructor arguments and so cannot …

dghgit

committed

b466d95

sha3: TupleHash and ParallelHash panicked on an output buffer shorter than output_len instead of truncating, and neither they nor KMAC zeroized past the digest as the Hash and MAC contracts require…

dghgit

committed

0e8b2f7

core: drop XOFOutput::do_final and do_final_out, which no implementor overrode and nothing outside their own tests called; a squeeze has nothing to finalize, so ending the stream is dropping the va…

dghgit

committed

ad3fa52

core, core-test-framework, sha3, factory, mldsa, mlkem, cli: rename the XOF squeezing vocabulary, so XOFOutput becomes XOFSqueezer with SHAKEOutput and XOFFactoryOutput following it, XOF::Output be…

dghgit

committed

8810ae7

core, core-test-framework, sha3: a final read of a XOF binds its output length, so XOFSqueezer gains do_final and do_final_out, KMACXOF, TupleHashXOF and ParallelHashXOF defer their right_encode(L)…

dghgit

committed

0a2bb8f

CLAUDE.md: record the cargo mutants mechanics this repo needs, since a bare run examines only the root package and finds nothing, the checked-in config's examine_globs silently overrides -f, crates…

dghgit

committed

8a46683

Navigation Menu

Uh oh!

XOF extends Hash: SHAKE128 and SHAKE256 are hashes, and squeezing gets its own type - #118

XOF extends Hash: SHAKE128 and SHAKE256 are hashes, and squeezing gets its own type#118
dghgit wants to merge 22 commits into
feature/simple-ciphersfrom
feature/xof-cshake

Commits on Sep 16, 2026

core, sha3: XOF extends Hash, so SHAKE128 and SHAKE256 are hashes; squeezing becomes its own type

sha3: pin the SHAKE block_bitlen and output_len values, which three mutants survived

core: XofOutput gains do_final and do_final_out, matching BC Java's doFinal after doOutput

sha3: add cSHAKE128 and cSHAKE256 (SP 800-185 Sec 3) with the Sec 2.3 encodings and cshake CLI subcommands

docs: record the cargo mutants scoping flags, the bc-test-data conventions and the commit message style in CLAUDE.md

sha3: add KMAC128 and KMAC256 (SP 800-185 Sec 4) with KMACXOF, MACFactory registration and kmac CLI subcommands

core: drop the Default supertrait from Hash, so keyed constructions can implement it

sha3: KMACXOF128 and KMACXOF256 as keyed XOFs, now that Hash no longer requires Default

core-test-framework: the XOF suite takes a constructor closure, so keyed XOFs can use it

sha3: add TupleHash and TupleHashXOF (SP 800-185 Sec 5), where each update appends one tuple element

sha3: add ParallelHash and ParallelHashXOF (SP 800-185 Sec 6), completing the Recommendation

cli: add tuplehash and parallelhash subcommands, completing SP 800-185 on the command line

sha3: pin the Hash and XOF trait views of TupleHash, ParallelHash and KMAC against the sample values, plus KMAC's key-type and buffer-length checks; kills the 88 mutants the SP 800-185 suites had m…

factory: replace the todo stub in xof_factory_tests with a differential suite against the SHAKE types; of 29 missed mutants only the equivalent default_128_bit one survives

core: Hash gains Clone as a supertrait, so a hash mid-stream can be forked and finished several ways from one absorbed prefix; the SP 800-185 types and the factory enums derive it, the sha2 and sha…

core: XOF gains default hash_xof and hash_xof_out bodies so only SHAKE overrides them, XofOutput is renamed XOFOutput to match the spec capitalisation used everywhere else, Hash::output_len documen…

core-test-framework: add test_hash_output_buffers, a closure-built Hash suite covering short, exact and over-long output buffers, for the implementors that take constructor arguments and so cannot …

sha3: TupleHash and ParallelHash panicked on an output buffer shorter than output_len instead of truncating, and neither they nor KMAC zeroized past the digest as the Hash and MAC contracts require…

core: drop XOFOutput::do_final and do_final_out, which no implementor overrode and nothing outside their own tests called; a squeeze has nothing to finalize, so ending the stream is dropping the va…

core, core-test-framework, sha3, factory, mldsa, mlkem, cli: rename the XOF squeezing vocabulary, so XOFOutput becomes XOFSqueezer with SHAKEOutput and XOFFactoryOutput following it, XOF::Output be…

core, core-test-framework, sha3: a final read of a XOF binds its output length, so XOFSqueezer gains do_final and do_final_out, KMACXOF, TupleHashXOF and ParallelHashXOF defer their right_encode(L)…

CLAUDE.md: record the cargo mutants mechanics this repo needs, since a bare run examines only the root package and finds nothing, the checked-in config's examine_globs silently overrides -f, crates…