Feat: Core AEAD Cipher Split - #120

Open

officialfrancismendoza wants to merge 28 commits into

bcgit:feature/symmetric-cipherfrom

officialfrancismendoza:feature/officialfrancismendoza/119-core-aead-cipher

Commits on Sep 16, 2026

core: SecurityStrength::from_bits and from_bytes become const fn, so a parameter set can derive MAX_SECURITY_STRENGTH from a const generic instead of naming a variant by hand; no behaviour change, …

dghgit
and
claude
committed
3912434
sha2: SHA512t becomes usable for every t FIPS 180-4 s. 5.3.6 defines a hash for, not just the two approved truncations, so the IV Generation Function regains the one- and two-digit decimal branches…

dghgit
and
claude
committed
785dbef
core, sha3: XOF extends Hash, so SHAKE128 and SHAKE256 are hashes; squeezing becomes its own type
dghgit
committed
4053f21
sha3: pin the SHAKE block_bitlen and output_len values, which three mutants survived
dghgit
committed
86819d7
core: XofOutput gains do_final and do_final_out, matching BC Java's doFinal after doOutput
dghgit
committed
24ae9b4
sha3: add cSHAKE128 and cSHAKE256 (SP 800-185 Sec 3) with the Sec 2.3 encodings and cshake CLI subcommands
dghgit
committed
517cd59
docs: record the cargo mutants scoping flags, the bc-test-data conventions and the commit message style in CLAUDE.md
dghgit
committed
61d3d8e
sha3: add KMAC128 and KMAC256 (SP 800-185 Sec 4) with KMACXOF, MACFactory registration and kmac CLI subcommands
dghgit
committed
63ca433
core: drop the Default supertrait from Hash, so keyed constructions can implement it
dghgit
committed
3adbfc1
sha3: KMACXOF128 and KMACXOF256 as keyed XOFs, now that Hash no longer requires Default
dghgit
committed
b1fff3c
core-test-framework: the XOF suite takes a constructor closure, so keyed XOFs can use it
dghgit
committed
9efbf5f
sha3: add TupleHash and TupleHashXOF (SP 800-185 Sec 5), where each update appends one tuple element
dghgit
committed
3913b55
sha3: add ParallelHash and ParallelHashXOF (SP 800-185 Sec 6), completing the Recommendation
dghgit
committed
90bd179
cli: add tuplehash and parallelhash subcommands, completing SP 800-185 on the command line
dghgit
committed
5c6302a
sha3: pin the Hash and XOF trait views of TupleHash, ParallelHash and KMAC against the sample values, plus KMAC's key-type and buffer-length checks; kills the 88 mutants the SP 800-185 suites had m…
dghgit
committed
68a3dbc
factory: replace the todo stub in xof_factory_tests with a differential suite against the SHAKE types; of 29 missed mutants only the equivalent default_128_bit one survives
dghgit
committed
50c125b
core: Hash gains Clone as a supertrait, so a hash mid-stream can be forked and finished several ways from one absorbed prefix; the SP 800-185 types and the factory enums derive it, the sha2 and sha…
dghgit
committed
b95dd0c
core: XOF gains default hash_xof and hash_xof_out bodies so only SHAKE overrides them, XofOutput is renamed XOFOutput to match the spec capitalisation used everywhere else, Hash::output_len documen…
dghgit
committed
6707002
core-test-framework: add test_hash_output_buffers, a closure-built Hash suite covering short, exact and over-long output buffers, for the implementors that take constructor arguments and so cannot …
dghgit
committed
b466d95
sha3: TupleHash and ParallelHash panicked on an output buffer shorter than output_len instead of truncating, and neither they nor KMAC zeroized past the digest as the Hash and MAC contracts require…
dghgit
committed
0e8b2f7
core: drop XOFOutput::do_final and do_final_out, which no implementor overrode and nothing outside their own tests called; a squeeze has nothing to finalize, so ending the stream is dropping the va…
dghgit
committed
ad3fa52
core, core-test-framework, sha3, factory, mldsa, mlkem, cli: rename the XOF squeezing vocabulary, so XOFOutput becomes XOFSqueezer with SHAKEOutput and XOFFactoryOutput following it, XOF::Output be…
dghgit
committed
8810ae7
core, core-test-framework, sha3: a final read of a XOF binds its output length, so XOFSqueezer gains do_final and do_final_out, KMACXOF, TupleHashXOF and ParallelHashXOF defer their right_encode(L)…
dghgit
committed
0a2bb8f
CLAUDE.md: record the cargo mutants mechanics this repo needs, since a bare run examines only the root package and finds nothing, the checked-in config's examine_globs silently overrides -f, crates…
dghgit
committed
8a46683

Navigation Menu

Feat: Core AEAD Cipher Split - #120

Feat: Core AEAD Cipher Split#120
officialfrancismendoza wants to merge 28 commits into
bcgit:feature/symmetric-cipherfrom
officialfrancismendoza:feature/officialfrancismendoza/119-core-aead-cipher

Commits on Sep 16, 2026

core: SecurityStrength::from_bits and from_bytes become const fn, so a parameter set can derive MAX_SECURITY_STRENGTH from a const generic instead of naming a variant by hand; no behaviour change, …

sha2: SHA512t becomes usable for every t FIPS 180-4 s. 5.3.6 defines a hash for, not just the two approved truncations, so the IV Generation Function regains the one- and two-digit decimal branches…

core, sha3: XOF extends Hash, so SHAKE128 and SHAKE256 are hashes; squeezing becomes its own type

sha3: pin the SHAKE block_bitlen and output_len values, which three mutants survived

core: XofOutput gains do_final and do_final_out, matching BC Java's doFinal after doOutput

sha3: add cSHAKE128 and cSHAKE256 (SP 800-185 Sec 3) with the Sec 2.3 encodings and cshake CLI subcommands

docs: record the cargo mutants scoping flags, the bc-test-data conventions and the commit message style in CLAUDE.md

sha3: add KMAC128 and KMAC256 (SP 800-185 Sec 4) with KMACXOF, MACFactory registration and kmac CLI subcommands

core: drop the Default supertrait from Hash, so keyed constructions can implement it

sha3: KMACXOF128 and KMACXOF256 as keyed XOFs, now that Hash no longer requires Default

core-test-framework: the XOF suite takes a constructor closure, so keyed XOFs can use it

sha3: add TupleHash and TupleHashXOF (SP 800-185 Sec 5), where each update appends one tuple element

sha3: add ParallelHash and ParallelHashXOF (SP 800-185 Sec 6), completing the Recommendation

cli: add tuplehash and parallelhash subcommands, completing SP 800-185 on the command line

sha3: pin the Hash and XOF trait views of TupleHash, ParallelHash and KMAC against the sample values, plus KMAC's key-type and buffer-length checks; kills the 88 mutants the SP 800-185 suites had m…

factory: replace the todo stub in xof_factory_tests with a differential suite against the SHAKE types; of 29 missed mutants only the equivalent default_128_bit one survives

core: Hash gains Clone as a supertrait, so a hash mid-stream can be forked and finished several ways from one absorbed prefix; the SP 800-185 types and the factory enums derive it, the sha2 and sha…

core: XOF gains default hash_xof and hash_xof_out bodies so only SHAKE overrides them, XofOutput is renamed XOFOutput to match the spec capitalisation used everywhere else, Hash::output_len documen…

core-test-framework: add test_hash_output_buffers, a closure-built Hash suite covering short, exact and over-long output buffers, for the implementors that take constructor arguments and so cannot …

sha3: TupleHash and ParallelHash panicked on an output buffer shorter than output_len instead of truncating, and neither they nor KMAC zeroized past the digest as the Hash and MAC contracts require…

core: drop XOFOutput::do_final and do_final_out, which no implementor overrode and nothing outside their own tests called; a squeeze has nothing to finalize, so ending the stream is dropping the va…

core, core-test-framework, sha3, factory, mldsa, mlkem, cli: rename the XOF squeezing vocabulary, so XOFOutput becomes XOFSqueezer with SHAKEOutput and XOFFactoryOutput following it, XOF::Output be…

core, core-test-framework, sha3: a final read of a XOF binds its output length, so XOFSqueezer gains do_final and do_final_out, KMACXOF, TupleHashXOF and ParallelHashXOF defer their right_encode(L)…

CLAUDE.md: record the cargo mutants mechanics this repo needs, since a bare run examines only the root package and finds nothing, the checked-in config's examine_globs silently overrides -f, crates…

Commits on Sep 17, 2026

core, core-test-framework: AEADCipherEncryptor/AEADCipherDecryptor gain update_out_len and a FINAL_LEN final buffer so a buffering cipher or an inline ciphertext||tag layout can be expressed; Tagge…

ascon, cli: add bouncycastle-ascon (SP 800-232 Ascon-AEAD128/Hash256/XOF128/CXOF128) implementing AEADCipherEncryptor/AEADCipherDecryptor via AsconAead128Encryptor/AsconAead128Decryptor, with HashF…

Rebased #120 onto #118. Ported ASCON XOF/CXOF to new Hash/XOF/XOFSqueezer API and updated factory/CLI/tests/benches to compile against the new API (#119)

Minor doc fix to lib.rs given new XOF api (#119)