Expand description
Duplex-sponge AEAD built from Keccak-f[1600] (SHA-3 family permutation).
Rate 136 bytes, 256-bit tag, 256-bit key, 128-bit nonce. Associated data is absorbed before plaintext duplex steps; the tag is the first 32 bytes of the outer state after processing.
§Security
This construction follows the duplex-sponge model (Bertoni et al.). The permutation is NIST-standardized SHA-3 / FIPS 202; this crate defines a non-standard AEAD mode on top of it. Use only after independent review for your threat model.
Re-exports§
pub use crypto::DuplexCryptoError;pub use params::KEY_BYTES;pub use params::NONCE_BYTES;pub use params::RATE_BYTES;pub use params::TAG_BYTES;
Modules§
- crypto
- Duplex AEAD encrypt/decrypt over byte slices.
- params
- Parameter sizes for duplex-sponge AEAD (Keccak-f[1600], rate 136 bytes).
- simd
- SIMD dispatch (portable default; AVX2 delegates to portable for duplex).
- state
- Keccak duplex sponge state for AEAD.
Structs§
- Duplex
Sponge Aead - Keccak-f[1600] duplex-sponge AEAD (136-byte rate, 32-byte tag).