authorgravatar for 124872+jedisct1@users.noreply.github.comFrank Denis <124872+jedisct1@users.noreply.github.com> 2023-03-09 20:20:57+01:00
committergravatar for noreply@github.comGitHub <noreply@github.com> 2023-03-09 19:20:57+00:00
log95f6a5935a675efe6d30bc2388e7a0bc6b742c6d
treeade606dce535ffa618a8c50234be21431347627f
parent12b74b2c0587e1f3f0ce8fdae47ab76e790b0d8e
signaturebadge-question-mark Signed by PGP key 4AEE18F83AFDEB23

TurboSHAKE: change default delimiter to 0x1F (#14857)

The TurboSHAKE paper just got published: https://eprint.iacr.org/2023/342.pdf and unlike the previous K12 paper, suggests 0x1F instead of 0x01 as the default value for "D".

1 files changed, 2 insertions(+), 2 deletions(-)

lib/std/crypto/sha3.zig+2-2
......@@ -20,7 +20,7 @@ pub const Shake256 = Shake(256);
2020
2121/// TurboSHAKE128 is a XOF (a secure hash function with a variable output length), with a 128 bit security level.
2222/// It is based on the same permutation as SHA3 and SHAKE128, but which much higher performance.
23/// The delimiter is 0x01 by default, but can be changed for context-separation.
23/// The delimiter is 0x1f by default, but can be changed for context-separation.
2424pub fn TurboShake128(comptime delim: ?u8) type {
2525 return TurboShake(128, delim);
2626}
......@@ -96,7 +96,7 @@ pub fn Shake(comptime security_level: u11) type {
9696/// The TurboSHAKE extendable output hash function.
9797/// https://datatracker.ietf.org/doc/draft-irtf-cfrg-kangarootwelve/
9898pub fn TurboShake(comptime security_level: u11, comptime delim: ?u8) type {
99 return ShakeLike(security_level, delim orelse 0x01, 12);
99 return ShakeLike(security_level, delim orelse 0x1f, 12);
100100}
101101
102102fn ShakeLike(comptime security_level: u11, comptime delim: u8, comptime rounds: u5) type {