XOF extends Hash: SHAKE128 and SHAKE256 are hashes, and squeezing gets its own type by dghgit · Pull Request #118 · bcgit/bc-rust

core, sha3: XOF extends Hash, so SHAKE128 and SHAKE256 are hashes; squeezing becomes its own type

dghgit

committed

b1a7731

sha3: pin the SHAKE block_bitlen and output_len values, which three mutants survived

dghgit

committed

61a798a

core: XofOutput gains do_final and do_final_out, matching BC Java's doFinal after doOutput

dghgit

committed

11b645a

sha3: add cSHAKE128 and cSHAKE256 (SP 800-185 Sec 3) with the Sec 2.3 encodings and cshake CLI subcommands

dghgit

committed

52d88a7

docs: record the cargo mutants scoping flags, the bc-test-data conventions and the commit message style in CLAUDE.md

dghgit

committed

dfbd3f9

sha3: add KMAC128 and KMAC256 (SP 800-185 Sec 4) with KMACXOF, MACFactory registration and kmac CLI subcommands

dghgit

committed

68933c2

core: drop the Default supertrait from Hash, so keyed constructions can implement it

dghgit

committed

386b43d

sha3: KMACXOF128 and KMACXOF256 as keyed XOFs, now that Hash no longer requires Default

dghgit

committed

3c25e45

core-test-framework: the XOF suite takes a constructor closure, so keyed XOFs can use it

dghgit

committed

e5b707b

sha3: add TupleHash and TupleHashXOF (SP 800-185 Sec 5), where each update appends one tuple element

dghgit

committed

d2a103c

sha3: add ParallelHash and ParallelHashXOF (SP 800-185 Sec 6), completing the Recommendation

dghgit

committed

59c360f

cli: add tuplehash and parallelhash subcommands, completing SP 800-185 on the command line

dghgit

committed

4eb5eed

sha3: pin the Hash and XOF trait views of TupleHash, ParallelHash and KMAC against the sample values, plus KMAC's key-type and buffer-length checks; kills the 88 mutants the SP 800-185 suites had m…

dghgit

committed

7df50c4

factory: replace the todo stub in xof_factory_tests with a differential suite against the SHAKE types; of 29 missed mutants only the equivalent default_128_bit one survives

dghgit

committed

5c45ae8

core: Hash gains Clone as a supertrait, so a hash mid-stream can be forked and finished several ways from one absorbed prefix; the SP 800-185 types and the factory enums derive it, the sha2 and sha…

dghgit

committed

cb06141

Navigation Menu

Uh oh!

XOF extends Hash: SHAKE128 and SHAKE256 are hashes, and squeezing gets its own type - #118

XOF extends Hash: SHAKE128 and SHAKE256 are hashes, and squeezing gets its own type#118
dghgit wants to merge 15 commits into
feature/symmetric-cipherfrom
feature/xof-cshake

Commits on Sep 9, 2026

core, sha3: XOF extends Hash, so SHAKE128 and SHAKE256 are hashes; squeezing becomes its own type

sha3: pin the SHAKE block_bitlen and output_len values, which three mutants survived

core: XofOutput gains do_final and do_final_out, matching BC Java's doFinal after doOutput

sha3: add cSHAKE128 and cSHAKE256 (SP 800-185 Sec 3) with the Sec 2.3 encodings and cshake CLI subcommands

docs: record the cargo mutants scoping flags, the bc-test-data conventions and the commit message style in CLAUDE.md

sha3: add KMAC128 and KMAC256 (SP 800-185 Sec 4) with KMACXOF, MACFactory registration and kmac CLI subcommands

core: drop the Default supertrait from Hash, so keyed constructions can implement it

sha3: KMACXOF128 and KMACXOF256 as keyed XOFs, now that Hash no longer requires Default

core-test-framework: the XOF suite takes a constructor closure, so keyed XOFs can use it

sha3: add TupleHash and TupleHashXOF (SP 800-185 Sec 5), where each update appends one tuple element

sha3: add ParallelHash and ParallelHashXOF (SP 800-185 Sec 6), completing the Recommendation

cli: add tuplehash and parallelhash subcommands, completing SP 800-185 on the command line

sha3: pin the Hash and XOF trait views of TupleHash, ParallelHash and KMAC against the sample values, plus KMAC's key-type and buffer-length checks; kills the 88 mutants the SP 800-185 suites had m…

factory: replace the todo stub in xof_factory_tests with a differential suite against the SHAKE types; of 29 missed mutants only the equivalent default_128_bit one survives

core: Hash gains Clone as a supertrait, so a hash mid-stream can be forked and finished several ways from one absorbed prefix; the SP 800-185 types and the factory enums derive it, the sha2 and sha…