Skip to content

sha3: Add SHAKE support functions for streaming read

Daiki Ueno requested to merge ueno/nettle:wip/dueno/shake-streaming into master

The current SHAKE256 API (sha3_256_shake) only supports one-shot read, though there are use-cases such as in ML-KEM (Kyber) where the required number of bytes are not known at run time. This adds the following couple of functions: sha3_256_shake_pad and sha3_256_shake_read, with which applications could implement a streaming interface with SHA3_256_BLOCK_SIZE buffer.

Signed-off-by: Daiki Ueno

Merge request reports