tree 8352bfb727e389fe2060a7b91d3d641a02f7f369
parent 92d88b081a492a5a9c208555199ad64099131f77
author Kris Kwiatkowski <kris@cloudflare.com> 1525279943 +0100
committer Filippo Valsorda <filippo@golang.org> 1555522847 +0000

sha3: add cSHAKE support

This patch implements 128- and 256-bit version of customizable variant
of SHAKE function (cSHAKE).

* Implementation based on NIST FIPS 202
* Test data file has been updated with cSHAKE KATs. I've copied
  examples from NIST document available here:
  https://csrc.nist.gov/csrc/media/projects/cryptographic-standards-and
  -guidelines/documents/examples/cshake_samples.pdf

Fixes #25395

Change-Id: Icbbc4232f3d9a28b3d6ead51937c2e60c00e5d8c
Reviewed-on: https://go-review.googlesource.com/c/crypto/+/111281
Reviewed-by: Filippo Valsorda <filippo@golang.org>