sleeping_kangaroo12 0.0.3 → 0.0.4

data/ext/xkcp/lib/high/KangarooTwelve/KangarooTwelve.c

@@ -1,301 +0,0 @@
-/*
-The eXtended Keccak Code Package (XKCP)
-https://github.com/XKCP/XKCP
-
-KangarooTwelve, designed by Guido Bertoni, Joan Daemen, Michaël Peeters, Gilles Van Assche, Ronny Van Keer and Benoît Viguier.
-
-Implementation by Ronny Van Keer, hereby denoted as "the implementer".
-
-For more information, feedback or questions, please refer to the Keccak Team website:
-https://keccak.team/
-
-To the extent possible under law, the implementer has waived all copyright
-and related or neighboring rights to the source code in this file.
-http://creativecommons.org/publicdomain/zero/1.0/
-*/
-
-#include <string.h>
-#include <stdint.h>
-#include "KangarooTwelve.h"
-
-#ifdef XKCP_has_KeccakP1600times2
-    #include "KeccakP-1600-times2-SnP.h"
-#endif
-
-#ifdef XKCP_has_KeccakP1600times4
-    #include "KeccakP-1600-times4-SnP.h"
-#endif
-
-#ifdef XKCP_has_KeccakP1600times8
-    #include "KeccakP-1600-times8-SnP.h"
-#endif
-
-#define chunkSize       8192
-#define laneSize        8
-#define suffixLeaf      0x0B /* '110': message hop, simple padding, inner node */
-
-#define security        128
-#define capacity        (2*security)
-#define capacityInBytes (capacity/8)
-#define capacityInLanes (capacityInBytes/laneSize)
-#define rate            (1600-capacity)
-#define rateInBytes     (rate/8)
-#define rateInLanes     (rateInBytes/laneSize)
-
-#define ParallelSpongeFastLoop( Parallellism ) \
-    while ( inLen >= Parallellism * chunkSize ) { \
-        ALIGN(KeccakP1600times##Parallellism##_statesAlignment) unsigned char states[KeccakP1600times##Parallellism##_statesSizeInBytes]; \
-        unsigned char intermediate[Parallellism*capacityInBytes]; \
-        unsigned int localBlockLen = chunkSize; \
-        const unsigned char * localInput = input; \
-        unsigned int i; \
-        unsigned int fastLoopOffset; \
-        \
-        KeccakP1600times##Parallellism##_StaticInitialize(); \
-        KeccakP1600times##Parallellism##_InitializeAll(states); \
-        fastLoopOffset = (unsigned int)KeccakP1600times##Parallellism##_12rounds_FastLoop_Absorb(states, rateInLanes, chunkSize / laneSize, rateInLanes, localInput, Parallellism * chunkSize); \
-        localBlockLen -= fastLoopOffset; \
-        localInput += fastLoopOffset; \
-        for ( i = 0; i < Parallellism; ++i, localInput += chunkSize ) { \
-            KeccakP1600times##Parallellism##_AddBytes(states, i, localInput, 0, localBlockLen); \
-            KeccakP1600times##Parallellism##_AddByte(states, i, suffixLeaf, localBlockLen); \
-            KeccakP1600times##Parallellism##_AddByte(states, i, 0x80, rateInBytes-1); \
-        } \
-        KeccakP1600times##Parallellism##_PermuteAll_12rounds(states); \
-        input += Parallellism * chunkSize; \
-        inLen -= Parallellism * chunkSize; \
-        ktInstance->blockNumber += Parallellism; \
-        KeccakP1600times##Parallellism##_ExtractLanesAll(states, intermediate, capacityInLanes, capacityInLanes ); \
-        if (KeccakWidth1600_12rounds_SpongeAbsorb(&ktInstance->finalNode, intermediate, Parallellism * capacityInBytes) != 0) return 1; \
-    }
-
-#define ParallelSpongeLoop( Parallellism ) \
-    while ( inLen >= Parallellism * chunkSize ) { \
-        ALIGN(KeccakP1600times##Parallellism##_statesAlignment) unsigned char states[KeccakP1600times##Parallellism##_statesSizeInBytes]; \
-        unsigned char intermediate[Parallellism*capacityInBytes]; \
-        unsigned int localBlockLen = chunkSize; \
-        const unsigned char * localInput = input; \
-        unsigned int i; \
-        \
-        KeccakP1600times##Parallellism##_StaticInitialize(); \
-        KeccakP1600times##Parallellism##_InitializeAll(states); \
-        while(localBlockLen >= rateInBytes) { \
-            KeccakP1600times##Parallellism##_AddLanesAll(states, localInput, rateInLanes, chunkSize / laneSize); \
-            KeccakP1600times##Parallellism##_PermuteAll_12rounds(states); \
-            localBlockLen -= rateInBytes; \
-            localInput += rateInBytes; \
-           } \
-        for ( i = 0; i < Parallellism; ++i, localInput += chunkSize ) { \
-            KeccakP1600times##Parallellism##_AddBytes(states, i, localInput, 0, localBlockLen); \
-            KeccakP1600times##Parallellism##_AddByte(states, i, suffixLeaf, localBlockLen); \
-            KeccakP1600times##Parallellism##_AddByte(states, i, 0x80, rateInBytes-1); \
-        } \
-        KeccakP1600times##Parallellism##_PermuteAll_12rounds(states); \
-        input += Parallellism * chunkSize; \
-        inLen -= Parallellism * chunkSize; \
-        ktInstance->blockNumber += Parallellism; \
-        KeccakP1600times##Parallellism##_ExtractLanesAll(states, intermediate, capacityInLanes, capacityInLanes ); \
-        if (KeccakWidth1600_12rounds_SpongeAbsorb(&ktInstance->finalNode, intermediate, Parallellism * capacityInBytes) != 0) return 1; \
-    }
-
-#define ProcessLeaves( Parallellism ) \
-    while ( inLen >= Parallellism * chunkSize ) { \
-        unsigned char intermediate[Parallellism*capacityInBytes]; \
-        \
-        KeccakP1600times##Parallellism##_K12ProcessLeaves(input, intermediate); \
-        input += Parallellism * chunkSize; \
-        inLen -= Parallellism * chunkSize; \
-        ktInstance->blockNumber += Parallellism; \
-        if (KeccakWidth1600_12rounds_SpongeAbsorb(&ktInstance->finalNode, intermediate, Parallellism * capacityInBytes) != 0) return 1; \
-    }
-
-static unsigned int right_encode( unsigned char * encbuf, size_t value )
-{
-    unsigned int n, i;
-    size_t v;
-
-    for ( v = value, n = 0; v && (n < sizeof(size_t)); ++n, v >>= 8 )
-        ; /* empty */
-    for ( i = 1; i <= n; ++i )
-        encbuf[i-1] = (unsigned char)(value >> (8 * (n-i)));
-    encbuf[n] = (unsigned char)n;
-    return n + 1;
-}
-
-int KangarooTwelve_Initialize(KangarooTwelve_Instance *ktInstance, size_t outputLen)
-{
-    ktInstance->fixedOutputLength = outputLen;
-    ktInstance->queueAbsorbedLen = 0;
-    ktInstance->blockNumber = 0;
-    ktInstance->phase = ABSORBING;
-    return KeccakWidth1600_12rounds_SpongeInitialize(&ktInstance->finalNode, rate, capacity);
-}
-
-int KangarooTwelve_Update(KangarooTwelve_Instance *ktInstance, const unsigned char *input, size_t inLen)
-{
-    if (ktInstance->phase != ABSORBING)
-        return 1;
-
-    if ( ktInstance->blockNumber == 0 ) {
-        /* First block, absorb in final node */
-        unsigned int len = (inLen < (chunkSize - ktInstance->queueAbsorbedLen)) ? (unsigned int)inLen : (chunkSize - ktInstance->queueAbsorbedLen);
-        if (KeccakWidth1600_12rounds_SpongeAbsorb(&ktInstance->finalNode, input, len) != 0)
-            return 1;
-        input += len;
-        inLen -= len;
-        ktInstance->queueAbsorbedLen += len;
-        if ( (ktInstance->queueAbsorbedLen == chunkSize) && (inLen != 0) ) {
-            /* First block complete and more input data available, finalize it */
-            const unsigned char padding = 0x03; /* '110^6': message hop, simple padding */
-            ktInstance->queueAbsorbedLen = 0;
-            ktInstance->blockNumber = 1;
-            if (KeccakWidth1600_12rounds_SpongeAbsorb(&ktInstance->finalNode, &padding, 1) != 0)
-                return 1;
-            ktInstance->finalNode.byteIOIndex = (ktInstance->finalNode.byteIOIndex + 7) & ~7; /* Zero padding up to 64 bits */
-        }
-    }
-    else if ( ktInstance->queueAbsorbedLen != 0 ) {
-        /* There is data in the queue, absorb further in queue until block complete */
-        unsigned int len = (inLen < (chunkSize - ktInstance->queueAbsorbedLen)) ? (unsigned int)inLen : (chunkSize - ktInstance->queueAbsorbedLen);
-        if (KeccakWidth1600_12rounds_SpongeAbsorb(&ktInstance->queueNode, input, len) != 0)
-            return 1;
-        input += len;
-        inLen -= len;
-        ktInstance->queueAbsorbedLen += len;
-        if ( ktInstance->queueAbsorbedLen == chunkSize ) {
-            unsigned char intermediate[capacityInBytes];
-            ktInstance->queueAbsorbedLen = 0;
-            ++ktInstance->blockNumber;
-            if (KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits(&ktInstance->queueNode, suffixLeaf) != 0)
-                return 1;
-            if (KeccakWidth1600_12rounds_SpongeSqueeze(&ktInstance->queueNode, intermediate, capacityInBytes) != 0)
-                return 1;
-            if (KeccakWidth1600_12rounds_SpongeAbsorb(&ktInstance->finalNode, intermediate, capacityInBytes) != 0)
-                return 1;
-        }
-    }
-
-    #if defined(KeccakP1600times8_implementation) && !defined(KeccakP1600times8_isFallback)
-    #if defined(KeccakP1600times8_K12ProcessLeaves_supported)
-    ProcessLeaves( 8 )
-    #elif defined(KeccakP1600times8_12rounds_FastLoop_supported)
-    ParallelSpongeFastLoop( 8 )
-    #else
-    ParallelSpongeLoop( 8 )
-    #endif
-    #endif
-
-    #if defined(KeccakP1600times4_implementation) && !defined(KeccakP1600times4_isFallback)
-    #if defined(KeccakP1600times4_K12ProcessLeaves_supported)
-    ProcessLeaves( 4 )
-    #elif defined(KeccakP1600times4_12rounds_FastLoop_supported)
-    ParallelSpongeFastLoop( 4 )
-    #else
-    ParallelSpongeLoop( 4 )
-    #endif
-    #endif
-
-    #if defined(KeccakP1600times2_implementation) && !defined(KeccakP1600times2_isFallback)
-    #if defined(KeccakP1600times2_K12ProcessLeaves_supported)
-    ProcessLeaves( 2 )
-    #elif defined(KeccakP1600times2_12rounds_FastLoop_supported)
-    ParallelSpongeFastLoop( 2 )
-    #else
-    ParallelSpongeLoop( 2 )
-    #endif
-    #endif
-
-    while ( inLen > 0 ) {
-        unsigned int len = (inLen < chunkSize) ? (unsigned int)inLen : chunkSize;
-        if (KeccakWidth1600_12rounds_SpongeInitialize(&ktInstance->queueNode, rate, capacity) != 0)
-            return 1;
-        if (KeccakWidth1600_12rounds_SpongeAbsorb(&ktInstance->queueNode, input, len) != 0)
-            return 1;
-        input += len;
-        inLen -= len;
-        if ( len == chunkSize ) {
-            unsigned char intermediate[capacityInBytes];
-            ++ktInstance->blockNumber;
-            if (KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits(&ktInstance->queueNode, suffixLeaf) != 0)
-                return 1;
-            if (KeccakWidth1600_12rounds_SpongeSqueeze(&ktInstance->queueNode, intermediate, capacityInBytes) != 0)
-                return 1;
-            if (KeccakWidth1600_12rounds_SpongeAbsorb(&ktInstance->finalNode, intermediate, capacityInBytes) != 0)
-                return 1;
-        }
-        else
-            ktInstance->queueAbsorbedLen = len;
-    }
-
-    return 0;
-}
-
-int KangarooTwelve_Final(KangarooTwelve_Instance *ktInstance, unsigned char * output, const unsigned char * customization, size_t customLen)
-{
-    unsigned char encbuf[sizeof(size_t)+1+2];
-    unsigned char padding;
-
-    if (ktInstance->phase != ABSORBING)
-        return 1;
-
-    /* Absorb customization | right_encode(customLen) */
-    if ((customLen != 0) && (KangarooTwelve_Update(ktInstance, customization, customLen) != 0))
-        return 1;
-    if (KangarooTwelve_Update(ktInstance, encbuf, right_encode(encbuf, customLen)) != 0)
-        return 1;
-
-    if ( ktInstance->blockNumber == 0 ) {
-        /* Non complete first block in final node, pad it */
-        padding = 0x07; /*  '11': message hop, final node */
-    }
-    else {
-        unsigned int n;
-
-        if ( ktInstance->queueAbsorbedLen != 0 ) {
-            /* There is data in the queue node */
-            unsigned char intermediate[capacityInBytes];
-            ++ktInstance->blockNumber;
-            if (KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits(&ktInstance->queueNode, suffixLeaf) != 0)
-                return 1;
-            if (KeccakWidth1600_12rounds_SpongeSqueeze(&ktInstance->queueNode, intermediate, capacityInBytes) != 0)
-                return 1;
-            if (KeccakWidth1600_12rounds_SpongeAbsorb(&ktInstance->finalNode, intermediate, capacityInBytes) != 0)
-                return 1;
-        }
-        --ktInstance->blockNumber; /* Absorb right_encode(number of Chaining Values) || 0xFF || 0xFF */
-        n = right_encode(encbuf, ktInstance->blockNumber);
-        encbuf[n++] = 0xFF;
-        encbuf[n++] = 0xFF;
-        if (KeccakWidth1600_12rounds_SpongeAbsorb(&ktInstance->finalNode, encbuf, n) != 0)
-            return 1;
-        padding = 0x06; /* '01': chaining hop, final node */
-    }
-    if (KeccakWidth1600_12rounds_SpongeAbsorbLastFewBits(&ktInstance->finalNode, padding) != 0)
-        return 1;
-    if ( ktInstance->fixedOutputLength != 0 ) {
-        ktInstance->phase = FINAL;
-        return KeccakWidth1600_12rounds_SpongeSqueeze(&ktInstance->finalNode, output, ktInstance->fixedOutputLength);
-    }
-    ktInstance->phase = SQUEEZING;
-    return 0;
-}
-
-int KangarooTwelve_Squeeze(KangarooTwelve_Instance *ktInstance, unsigned char * output, size_t outputLen)
-{
-    if (ktInstance->phase != SQUEEZING)
-        return 1;
-    return KeccakWidth1600_12rounds_SpongeSqueeze(&ktInstance->finalNode, output, outputLen);
-}
-
-int KangarooTwelve( const unsigned char * input, size_t inLen, unsigned char * output, size_t outLen, const unsigned char * customization, size_t customLen )
-{
-    KangarooTwelve_Instance ktInstance;
-
-    if (outLen == 0)
-        return 1;
-    if (KangarooTwelve_Initialize(&ktInstance, outLen) != 0)
-        return 1;
-    if (KangarooTwelve_Update(&ktInstance, input, inLen) != 0)
-        return 1;
-    return KangarooTwelve_Final(&ktInstance, output, customization, customLen);
-}

data/ext/xkcp/lib/high/Keccak/FIPS202/KeccakHash.c

@@ -1,81 +0,0 @@
-/*
-The eXtended Keccak Code Package (XKCP)
-https://github.com/XKCP/XKCP
-
-Keccak, designed by Guido Bertoni, Joan Daemen, Michaël Peeters and Gilles Van Assche.
-
-Implementation by the designers, hereby denoted as "the implementer".
-
-For more information, feedback or questions, please refer to the Keccak Team website:
-https://keccak.team/
-
-To the extent possible under law, the implementer has waived all copyright
-and related or neighboring rights to the source code in this file.
-http://creativecommons.org/publicdomain/zero/1.0/
-*/
-
-#include <string.h>
-#include "KeccakHash.h"
-
-/* ---------------------------------------------------------------- */
-
-HashReturn Keccak_HashInitialize(Keccak_HashInstance *instance, unsigned int rate, unsigned int capacity, unsigned int hashbitlen, unsigned char delimitedSuffix)
-{
-    HashReturn result;
-
-    if (delimitedSuffix == 0)
-        return KECCAK_FAIL;
-    result = (HashReturn)KeccakWidth1600_SpongeInitialize(&instance->sponge, rate, capacity);
-    if (result != KECCAK_SUCCESS)
-        return result;
-    instance->fixedOutputLength = hashbitlen;
-    instance->delimitedSuffix = delimitedSuffix;
-    return KECCAK_SUCCESS;
-}
-
-/* ---------------------------------------------------------------- */
-
-HashReturn Keccak_HashUpdate(Keccak_HashInstance *instance, const BitSequence *data, BitLength databitlen)
-{
-    if ((databitlen % 8) == 0)
-        return (HashReturn)KeccakWidth1600_SpongeAbsorb(&instance->sponge, data, databitlen/8);
-    else {
-        HashReturn ret = (HashReturn)KeccakWidth1600_SpongeAbsorb(&instance->sponge, data, databitlen/8);
-        if (ret == KECCAK_SUCCESS) {
-            /* The last partial byte is assumed to be aligned on the least significant bits */
-            unsigned char lastByte = data[databitlen/8];
-            /* Concatenate the last few bits provided here with those of the suffix */
-            unsigned short delimitedLastBytes = (unsigned short)((unsigned short)(lastByte & ((1 << (databitlen % 8)) - 1)) | ((unsigned short)instance->delimitedSuffix << (databitlen % 8)));
-            if ((delimitedLastBytes & 0xFF00) == 0x0000) {
-                instance->delimitedSuffix = delimitedLastBytes & 0xFF;
-            }
-            else {
-                unsigned char oneByte[1];
-                oneByte[0] = delimitedLastBytes & 0xFF;
-                ret = (HashReturn)KeccakWidth1600_SpongeAbsorb(&instance->sponge, oneByte, 1);
-                instance->delimitedSuffix = (delimitedLastBytes >> 8) & 0xFF;
-            }
-        }
-        return ret;
-    }
-}
-
-/* ---------------------------------------------------------------- */
-
-HashReturn Keccak_HashFinal(Keccak_HashInstance *instance, BitSequence *hashval)
-{
-    HashReturn ret = (HashReturn)KeccakWidth1600_SpongeAbsorbLastFewBits(&instance->sponge, instance->delimitedSuffix);
-    if (ret == KECCAK_SUCCESS)
-        return (HashReturn)KeccakWidth1600_SpongeSqueeze(&instance->sponge, hashval, instance->fixedOutputLength/8);
-    else
-        return ret;
-}
-
-/* ---------------------------------------------------------------- */
-
-HashReturn Keccak_HashSqueeze(Keccak_HashInstance *instance, BitSequence *data, BitLength databitlen)
-{
-    if ((databitlen % 8) != 0)
-        return KECCAK_FAIL;
-    return (HashReturn)KeccakWidth1600_SpongeSqueeze(&instance->sponge, data, databitlen/8);
-}

data/ext/xkcp/lib/high/Keccak/FIPS202/KeccakHash.h

@@ -1,125 +0,0 @@
-/*
-The eXtended Keccak Code Package (XKCP)
-https://github.com/XKCP/XKCP
-
-Keccak, designed by Guido Bertoni, Joan Daemen, Michaël Peeters and Gilles Van Assche.
-
-Implementation by the designers, hereby denoted as "the implementer".
-
-For more information, feedback or questions, please refer to the Keccak Team website:
-https://keccak.team/
-
-To the extent possible under law, the implementer has waived all copyright
-and related or neighboring rights to the source code in this file.
-http://creativecommons.org/publicdomain/zero/1.0/
-*/
-
-#ifndef _KeccakHashInterface_h_
-#define _KeccakHashInterface_h_
-
-#include "config.h"
-#ifdef XKCP_has_KeccakP1600
-
-#include <stdint.h>
-#include <string.h>
-#include "KeccakSponge.h"
-
-#ifndef _Keccak_BitTypes_
-#define _Keccak_BitTypes_
-typedef uint8_t BitSequence;
-
-typedef size_t BitLength;
-#endif
-
-typedef enum { KECCAK_SUCCESS = 0, KECCAK_FAIL = 1, KECCAK_BAD_HASHLEN = 2 } HashReturn;
-
-typedef struct {
-    KeccakWidth1600_SpongeInstance sponge;
-    unsigned int fixedOutputLength;
-    unsigned char delimitedSuffix;
-} Keccak_HashInstance;
-
-/**
-  * Function to initialize the Keccak[r, c] sponge function instance used in sequential hashing mode.
-  * @param  hashInstance    Pointer to the hash instance to be initialized.
-  * @param  rate        The value of the rate r.
-  * @param  capacity    The value of the capacity c.
-  * @param  hashbitlen  The desired number of output bits,
-  *                     or 0 for an arbitrarily-long output.
-  * @param  delimitedSuffix Bits that will be automatically appended to the end
-  *                         of the input message, as in domain separation.
-  *                         This is a byte containing from 0 to 7 bits
-  *                         formatted like the @a delimitedData parameter of
-  *                         the Keccak_SpongeAbsorbLastFewBits() function.
-  * @pre    One must have r+c=1600 and the rate a multiple of 8 bits in this implementation.
-  * @return KECCAK_SUCCESS if successful, KECCAK_FAIL otherwise.
-  */
-HashReturn Keccak_HashInitialize(Keccak_HashInstance *hashInstance, unsigned int rate, unsigned int capacity, unsigned int hashbitlen, unsigned char delimitedSuffix);
-
-/** Macro to initialize a SHAKE128 instance as specified in the FIPS 202 standard.
-  */
-#define Keccak_HashInitialize_SHAKE128(hashInstance)        Keccak_HashInitialize(hashInstance, 1344,  256,   0, 0x1F)
-
-/** Macro to initialize a SHAKE256 instance as specified in the FIPS 202 standard.
-  */
-#define Keccak_HashInitialize_SHAKE256(hashInstance)        Keccak_HashInitialize(hashInstance, 1088,  512,   0, 0x1F)
-
-/** Macro to initialize a SHA3-224 instance as specified in the FIPS 202 standard.
-  */
-#define Keccak_HashInitialize_SHA3_224(hashInstance)        Keccak_HashInitialize(hashInstance, 1152,  448, 224, 0x06)
-
-/** Macro to initialize a SHA3-256 instance as specified in the FIPS 202 standard.
-  */
-#define Keccak_HashInitialize_SHA3_256(hashInstance)        Keccak_HashInitialize(hashInstance, 1088,  512, 256, 0x06)
-
-/** Macro to initialize a SHA3-384 instance as specified in the FIPS 202 standard.
-  */
-#define Keccak_HashInitialize_SHA3_384(hashInstance)        Keccak_HashInitialize(hashInstance,  832,  768, 384, 0x06)
-
-/** Macro to initialize a SHA3-512 instance as specified in the FIPS 202 standard.
-  */
-#define Keccak_HashInitialize_SHA3_512(hashInstance)        Keccak_HashInitialize(hashInstance,  576, 1024, 512, 0x06)
-
-/**
-  * Function to give input data to be absorbed.
-  * @param  hashInstance    Pointer to the hash instance initialized by Keccak_HashInitialize().
-  * @param  data        Pointer to the input data.
-  *                     When @a databitLen is not a multiple of 8, the last bits of data must be
-  *                     in the least significant bits of the last byte (little-endian convention).
-  *                     In this case, the (8 - @a databitLen mod 8) most significant bits
-  *                     of the last byte are ignored.
-  * @param  databitLen  The number of input bits provided in the input data.
-  * @pre    In the previous call to Keccak_HashUpdate(), databitlen was a multiple of 8.
-  * @return KECCAK_SUCCESS if successful, KECCAK_FAIL otherwise.
-  */
-HashReturn Keccak_HashUpdate(Keccak_HashInstance *hashInstance, const BitSequence *data, BitLength databitlen);
-
-/**
-  * Function to call after all input blocks have been input and to get
-  * output bits if the length was specified when calling Keccak_HashInitialize().
-  * @param  hashInstance    Pointer to the hash instance initialized by Keccak_HashInitialize().
-  * If @a hashbitlen was not 0 in the call to Keccak_HashInitialize(), the number of
-  *     output bits is equal to @a hashbitlen.
-  * If @a hashbitlen was 0 in the call to Keccak_HashInitialize(), the output bits
-  *     must be extracted using the Keccak_HashSqueeze() function.
-  * @param  hashval     Pointer to the buffer where to store the output data.
-  * @return KECCAK_SUCCESS if successful, KECCAK_FAIL otherwise.
-  */
-HashReturn Keccak_HashFinal(Keccak_HashInstance *hashInstance, BitSequence *hashval);
-
- /**
-  * Function to squeeze output data.
-  * @param  hashInstance    Pointer to the hash instance initialized by Keccak_HashInitialize().
-  * @param  data        Pointer to the buffer where to store the output data.
-  * @param  databitlen  The number of output bits desired (must be a multiple of 8).
-  * @pre    Keccak_HashFinal() must have been already called.
-  * @pre    @a databitlen is a multiple of 8.
-  * @return KECCAK_SUCCESS if successful, KECCAK_FAIL otherwise.
-  */
-HashReturn Keccak_HashSqueeze(Keccak_HashInstance *hashInstance, BitSequence *data, BitLength databitlen);
-
-#else
-#error This requires an implementation of Keccak-p[1600]
-#endif
-
-#endif

data/ext/xkcp/lib/high/Keccak/FIPS202/SimpleFIPS202.c

@@ -1,48 +0,0 @@
-/*
-The eXtended Keccak Code Package (XKCP)
-https://github.com/XKCP/XKCP
-
-Keccak, designed by Guido Bertoni, Joan Daemen, Michaël Peeters and Gilles Van Assche.
-
-Implementation by Gilles Van Assche, hereby denoted as "the implementer".
-
-For more information, feedback or questions, please refer to the Keccak Team website:
-https://keccak.team/
-
-To the extent possible under law, the implementer has waived all copyright
-and related or neighboring rights to the source code in this file.
-http://creativecommons.org/publicdomain/zero/1.0/
-*/
-
-#include "KeccakSponge.h"
-#include "SimpleFIPS202.h"
-
-int SHAKE128(unsigned char *output, size_t outputByteLen, const unsigned char *input, size_t inputByteLen)
-{
-    return KeccakWidth1600_Sponge(1344, 256, input, inputByteLen, 0x1F, output, outputByteLen);
-}
-
-int SHAKE256(unsigned char *output, size_t outputByteLen, const unsigned char *input, size_t inputByteLen)
-{
-    return KeccakWidth1600_Sponge(1088, 512, input, inputByteLen, 0x1F, output, outputByteLen);
-}
-
-int SHA3_224(unsigned char *output, const unsigned char *input, size_t inputByteLen)
-{
-    return KeccakWidth1600_Sponge(1152, 448, input, inputByteLen, 0x06, output, 224/8);
-}
-
-int SHA3_256(unsigned char *output, const unsigned char *input, size_t inputByteLen)
-{
-    return KeccakWidth1600_Sponge(1088, 512, input, inputByteLen, 0x06, output, 256/8);
-}
-
-int SHA3_384(unsigned char *output, const unsigned char *input, size_t inputByteLen)
-{
-    return KeccakWidth1600_Sponge( 832, 768, input, inputByteLen, 0x06, output, 384/8);
-}
-
-int SHA3_512(unsigned char *output, const unsigned char *input, size_t inputByteLen)
-{
-    return KeccakWidth1600_Sponge(576, 1024, input, inputByteLen, 0x06, output, 512/8);
-}

data/ext/xkcp/lib/high/Keccak/FIPS202/SimpleFIPS202.h

@@ -1,79 +0,0 @@
-/*
-The eXtended Keccak Code Package (XKCP)
-https://github.com/XKCP/XKCP
-
-Keccak, designed by Guido Bertoni, Joan Daemen, Michaël Peeters and Gilles Van Assche.
-
-Implementation by Gilles Van Assche, hereby denoted as "the implementer".
-
-For more information, feedback or questions, please refer to the Keccak Team website:
-https://keccak.team/
-
-To the extent possible under law, the implementer has waived all copyright
-and related or neighboring rights to the source code in this file.
-http://creativecommons.org/publicdomain/zero/1.0/
-*/
-
-#ifndef _SimpleFIPS202_h_
-#define _SimpleFIPS202_h_
-
-#include "config.h"
-#ifdef XKCP_has_KeccakP1600
-
-#include <string.h>
-
-/** Implementation of the SHAKE128 extendable output function (XOF) [FIPS 202].
-  * @param  output          Pointer to the output buffer.
-  * @param  outputByteLen   The desired number of output bytes.
-  * @param  input           Pointer to the input message.
-  * @param  inputByteLen    The length of the input message in bytes.
-  * @return 0 if successful, 1 otherwise.
-  */
-int SHAKE128(unsigned char *output, size_t outputByteLen, const unsigned char *input, size_t inputByteLen);
-
-/** Implementation of the SHAKE256 extendable output function (XOF) [FIPS 202].
-  * @param  output          Pointer to the output buffer.
-  * @param  outputByteLen   The desired number of output bytes.
-  * @param  input           Pointer to the input message.
-  * @param  inputByteLen    The length of the input message in bytes.
-  * @return 0 if successful, 1 otherwise.
-  */
-int SHAKE256(unsigned char *output, size_t outputByteLen, const unsigned char *input, size_t inputByteLen);
-
-/** Implementation of SHA3-224 [FIPS 202].
-  * @param  output          Pointer to the output buffer (28 bytes).
-  * @param  input           Pointer to the input message.
-  * @param  inputByteLen    The length of the input message in bytes.
-  * @return 0 if successful, 1 otherwise.
-  */
-int SHA3_224(unsigned char *output, const unsigned char *input, size_t inputByteLen);
-
-/** Implementation of SHA3-256 [FIPS 202].
-  * @param  output          Pointer to the output buffer (32 bytes).
-  * @param  input           Pointer to the input message.
-  * @param  inputByteLen    The length of the input message in bytes.
-  * @return 0 if successful, 1 otherwise.
-  */
-int SHA3_256(unsigned char *output, const unsigned char *input, size_t inputByteLen);
-
-/** Implementation of SHA3-384 [FIPS 202].
-  * @param  output          Pointer to the output buffer (48 bytes).
-  * @param  input           Pointer to the input message.
-  * @param  inputByteLen    The length of the input message in bytes.
-  * @return 0 if successful, 1 otherwise.
-  */
-int SHA3_384(unsigned char *output, const unsigned char *input, size_t inputByteLen);
-
-/** Implementation of SHA3-512 [FIPS 202].
-  * @param  output          Pointer to the output buffer (64 bytes).
-  * @param  input           Pointer to the input message.
-  * @param  inputByteLen    The length of the input message in bytes.
-  * @return 0 if successful, 1 otherwise.
-  */
-int SHA3_512(unsigned char *output, const unsigned char *input, size_t inputByteLen);
-
-#else
-#error This requires an implementation of Keccak-p[1600]
-#endif
-
-#endif