Draft: Add MarsupilamiFourteen (m14) #475
Conversation
Remove the use of vectors and implement `XofReader`.
aewag
force-pushed
the
add-m14
branch
3 times, most recently
from
8e561f7
to
de1bbb1
Compare
|
Of course, nothing prevents you from adding M14 to RustCrypto. But as written here, I would have a 256-bit secure function, similar to K12, that calls TurboSHAKE256 instead of TurboSHAKE128. Given the status on cryptanalysis, I don't see the need for the 14 rounds anymore; having 12 rounds everywhere just seems simpler and cleaner. |
That definitely simplifies the implementation. I will therefore close this PR and better integrate a |
This is a draft to add the
MarsupilamiFourteenhash function (related issue #1).As
m14is a variant ofKangarooTwelve, the implementation can reuse parts of thek12crate.(Ignore the first commit as it is part of the open PR #353)
Therefore, the
k12crate is modified to export a macro to generate the hasher. Further is thesha3crate changed to expose a more low-level, but "hazmat", API.Shall this gated behind a "hazmat" feature?
I didnot find yet any test vectors, therefore tests are currently missing, but will be added.