Module sidecar 

Sidecar hash file generation (SHA-256, SHA-512, and SHA3-512).

All sidecar filenames use the hyphenated suffix convention mandated by CLAUDE.md §“Cryptographic hashes (release + CSAF)”:

• .sha-256 — SHA-2 family, 256-bit
• .sha-512 — SHA-2 family, 512-bit
• .sha3-512 — SHA-3 family (Keccak), 512-bit

Shipping three orthogonal algorithms gives defence-in-depth against a single-family cryptanalytic break.

Functions

generate_all_hashes

Generate the full SHA-256 / SHA-512 / SHA3-512 triplet in one pass.

generate_hashes

Generate SHA-256 and SHA3-512 hex digests.

sha3_512_hex

Generate SHA3-512 hex digest for the given bytes.

sha256_hex

Generate SHA-256 hex digest for the given bytes.

sha512_hex

Generate SHA-512 (SHA-2 family) hex digest for the given bytes.

write_sidecar_files

Write sidecar hash files alongside a CSAF JSON file.

write_sidecar_files_for

Write sidecar hash files for a file with any extension.