Struct XofReader 

pub struct XofReader { /* private fields */ }

A finished sponge that can be squeezed repeatedly.

Xof::finalize_xof consumes the hasher and produces a fixed number of bytes, which is the right shape for most callers. Rejection sampling is the exception: it cannot know in advance how much output it needs, because that depends on how many candidates it throws away. ML-KEM’s SampleNTT is exactly this case.

Reading is continuous — reading 32 bytes twice gives the same stream as reading 64 once — which is what makes the sampler’s output independent of the chunk size it happens to ask for.

Implementations

impl XofReader

pub fn read(&mut self, out: &mut [u8])

Squeeze the next out.len() bytes.