aegis-aead 0.1.0

package/dist/aegis256.d.ts

@@ -0,0 +1,115 @@
+/**
+ * AEGIS-256 cipher state.
+ * Uses 6 AES blocks (96 bytes) of internal state and processes 16-byte blocks.
+ */
+export declare class Aegis256State {
+    private s0;
+    private s1;
+    private s2;
+    private s3;
+    private s4;
+    private s5;
+    private tmp;
+    private z;
+    private newS;
+    private tBuf;
+    constructor();
+    get s(): Uint8Array[];
+    set s(states: Uint8Array[]);
+    /**
+     * Initializes the state with a key and nonce.
+     * @param key - 32-byte encryption key
+     * @param nonce - 32-byte nonce (must be unique per message)
+     */
+    init(key: Uint8Array, nonce: Uint8Array): void;
+    /**
+     * Updates the state with a 16-byte message block.
+     * @param m - ArrayLike<number> - 16-byte message block
+     */
+    update(m: ArrayLike<number>): void;
+    /**
+     * Absorbs a 16-byte associated data block into the state.
+     * @param ai - 16-byte associated data block
+     */
+    absorb(ai: Uint8Array): void;
+    /**
+     * Encrypts a 16-byte plaintext block and writes to output.
+     * @param xi - 16-byte plaintext block
+     * @param out - 16-byte output buffer
+     */
+    encTo(xi: Uint8Array, out: Uint8Array): void;
+    /**
+     * Encrypts a 16-byte plaintext block.
+     * @param xi - 16-byte plaintext block
+     * @returns 16-byte ciphertext block
+     */
+    enc(xi: Uint8Array): Uint8Array;
+    /**
+     * Decrypts a 16-byte ciphertext block and writes to output.
+     * @param ci - 16-byte ciphertext block
+     * @param out - 16-byte output buffer
+     */
+    decTo(ci: Uint8Array, out: Uint8Array): void;
+    /**
+     * Decrypts a 16-byte ciphertext block.
+     * @param ci - 16-byte ciphertext block
+     * @returns 16-byte plaintext block
+     */
+    dec(ci: Uint8Array): Uint8Array;
+    /**
+     * Decrypts a partial (final) ciphertext block smaller than 16 bytes.
+     * @param cn - Partial ciphertext block (1-15 bytes)
+     * @returns Decrypted plaintext of the same length
+     */
+    decPartial(cn: Uint8Array): Uint8Array;
+    /**
+     * Finalizes encryption/decryption and produces an authentication tag.
+     * @param adLenBits - Associated data length in bits
+     * @param msgLenBits - Message length in bits
+     * @param tagLen - Tag length (16 or 32 bytes)
+     * @returns Authentication tag
+     */
+    finalize(adLenBits: bigint, msgLenBits: bigint, tagLen?: 16 | 32): Uint8Array;
+}
+/**
+ * Encrypts a message using AEGIS-256.
+ * @param msg - Plaintext message
+ * @param ad - Associated data (authenticated but not encrypted)
+ * @param key - 32-byte encryption key
+ * @param nonce - 32-byte nonce (must be unique per message with the same key)
+ * @param tagLen - Authentication tag length: 16 or 32 bytes (default: 16)
+ * @returns Object containing ciphertext and authentication tag
+ */
+export declare function aegis256Encrypt(msg: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce: Uint8Array, tagLen?: 16 | 32): {
+    ciphertext: Uint8Array;
+    tag: Uint8Array;
+};
+/**
+ * Decrypts a message using AEGIS-256.
+ * @param ct - Ciphertext
+ * @param tag - Authentication tag (16 or 32 bytes)
+ * @param ad - Associated data (must match what was used during encryption)
+ * @param key - 32-byte encryption key
+ * @param nonce - 32-byte nonce (must match what was used during encryption)
+ * @returns Decrypted plaintext, or null if authentication fails
+ */
+export declare function aegis256Decrypt(ct: Uint8Array, tag: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce: Uint8Array): Uint8Array | null;
+/**
+ * Computes a MAC (Message Authentication Code) using AEGIS-256.
+ * @param data - Data to authenticate
+ * @param key - 32-byte key
+ * @param nonce - 32-byte nonce (optional, uses zero nonce if null)
+ * @param tagLen - Tag length: 16 or 32 bytes (default: 16)
+ * @returns Authentication tag
+ */
+export declare function aegis256Mac(data: Uint8Array, key: Uint8Array, nonce?: Uint8Array | null, tagLen?: 16 | 32): Uint8Array;
+/**
+ * Verifies a MAC computed using AEGIS-256.
+ * @param data - Data to verify
+ * @param tag - Expected authentication tag (16 or 32 bytes)
+ * @param key - 32-byte key
+ * @param nonce - 32-byte nonce (optional, uses zero nonce if null)
+ * @returns True if the tag is valid, false otherwise
+ */
+export declare function aegis256MacVerify(data: Uint8Array, tag: Uint8Array, key: Uint8Array, nonce?: Uint8Array | null): boolean;
+//# sourceMappingURL=aegis256.d.ts.map

package/dist/aegis256.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aegis256.d.ts","sourceRoot":"","sources":["../src/aegis256.ts"],"names":[],"mappings":"AAWA;;;GAGG;AACH,qBAAa,aAAa;IACzB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,EAAE,CAAa;IACvB,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,CAAC,CAAa;IACtB,OAAO,CAAC,IAAI,CAAe;IAC3B,OAAO,CAAC,IAAI,CAAa;;IAezB,IAAI,CAAC,IAAI,UAAU,EAAE,CAEpB;IAED,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,EAOzB;IAED;;;;OAIG;IACH,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI;IA0B9C;;;OAGG;IACH,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI;IAmBlC;;;OAGG;IACH,MAAM,CAAC,EAAE,EAAE,UAAU,GAAG,IAAI;IAI5B;;;;OAIG;IACH,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI;IAc5C;;;;OAIG;IACH,GAAG,CAAC,EAAE,EAAE,UAAU,GAAG,UAAU;IAM/B;;;;OAIG;IACH,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI;IAa5C;;;;OAIG;IACH,GAAG,CAAC,EAAE,EAAE,UAAU,GAAG,UAAU;IAM/B;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,UAAU,GAAG,UAAU;IAoBtC;;;;;;OAMG;IACH,QAAQ,CACP,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,EAAE,GAAG,EAAO,GAClB,UAAU;CAiCb;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC9B,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,UAAU,EACjB,MAAM,GAAE,EAAE,GAAG,EAAO,GAClB;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,UAAU,CAAA;CAAE,CAuB7C;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC9B,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,UAAU,GACf,UAAU,GAAG,IAAI,CAkCnB;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAC1B,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,UAAU,EACf,KAAK,GAAE,UAAU,GAAG,IAAW,EAC/B,MAAM,GAAE,EAAE,GAAG,EAAO,GAClB,UAAU,CAUZ;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,UAAU,EACf,KAAK,GAAE,UAAU,GAAG,IAAW,GAC7B,OAAO,CAIT"}

package/dist/aegis256.js

@@ -0,0 +1,292 @@
+import { aesRoundTo, andBlocksTo, C0, C1, constantTimeEqual, le64To, xorBlocksTo, zeroPad, } from "./aes.js";
+/**
+ * AEGIS-256 cipher state.
+ * Uses 6 AES blocks (96 bytes) of internal state and processes 16-byte blocks.
+ */
+export class Aegis256State {
+    constructor() {
+        this.s0 = new Uint8Array(16);
+        this.s1 = new Uint8Array(16);
+        this.s2 = new Uint8Array(16);
+        this.s3 = new Uint8Array(16);
+        this.s4 = new Uint8Array(16);
+        this.s5 = new Uint8Array(16);
+        this.tmp = new Uint8Array(16);
+        this.z = new Uint8Array(16);
+        this.newS = Array.from({ length: 6 }, () => new Uint8Array(16));
+        this.tBuf = new Uint8Array(16);
+    }
+    get s() {
+        return [this.s0, this.s1, this.s2, this.s3, this.s4, this.s5];
+    }
+    set s(states) {
+        this.s0.set(states[0]);
+        this.s1.set(states[1]);
+        this.s2.set(states[2]);
+        this.s3.set(states[3]);
+        this.s4.set(states[4]);
+        this.s5.set(states[5]);
+    }
+    /**
+     * Initializes the state with a key and nonce.
+     * @param key - 32-byte encryption key
+     * @param nonce - 32-byte nonce (must be unique per message)
+     */
+    init(key, nonce) {
+        const k0 = key.subarray(0, 16);
+        const k1 = key.subarray(16, 32);
+        const n0 = nonce.subarray(0, 16);
+        const n1 = nonce.subarray(16, 32);
+        xorBlocksTo(k0, n0, this.s0);
+        xorBlocksTo(k1, n1, this.s1);
+        this.s2.set(C1);
+        this.s3.set(C0);
+        xorBlocksTo(k0, C0, this.s4);
+        xorBlocksTo(k1, C1, this.s5);
+        const k0Xorn0 = new Uint8Array(16);
+        const k1Xorn1 = new Uint8Array(16);
+        xorBlocksTo(k0, n0, k0Xorn0);
+        xorBlocksTo(k1, n1, k1Xorn1);
+        for (let i = 0; i < 4; i++) {
+            this.update(k0);
+            this.update(k1);
+            this.update(k0Xorn0);
+            this.update(k1Xorn1);
+        }
+    }
+    /**
+     * Updates the state with a 16-byte message block.
+     * @param m - ArrayLike<number> - 16-byte message block
+     */
+    update(m) {
+        const newS = this.newS;
+        xorBlocksTo(this.s0, m, this.tmp);
+        aesRoundTo(this.s5, this.tmp, newS[0]);
+        aesRoundTo(this.s0, this.s1, newS[1]);
+        aesRoundTo(this.s1, this.s2, newS[2]);
+        aesRoundTo(this.s2, this.s3, newS[3]);
+        aesRoundTo(this.s3, this.s4, newS[4]);
+        aesRoundTo(this.s4, this.s5, newS[5]);
+        this.s0.set(newS[0]);
+        this.s1.set(newS[1]);
+        this.s2.set(newS[2]);
+        this.s3.set(newS[3]);
+        this.s4.set(newS[4]);
+        this.s5.set(newS[5]);
+    }
+    /**
+     * Absorbs a 16-byte associated data block into the state.
+     * @param ai - 16-byte associated data block
+     */
+    absorb(ai) {
+        this.update(ai);
+    }
+    /**
+     * Encrypts a 16-byte plaintext block and writes to output.
+     * @param xi - 16-byte plaintext block
+     * @param out - 16-byte output buffer
+     */
+    encTo(xi, out) {
+        const z = this.z;
+        const tmp = this.tmp;
+        xorBlocksTo(this.s1, this.s4, z);
+        for (let i = 0; i < 16; i++)
+            z[i] ^= this.s5[i];
+        andBlocksTo(this.s2, this.s3, tmp);
+        for (let i = 0; i < 16; i++)
+            z[i] ^= tmp[i];
+        this.update(xi);
+        for (let i = 0; i < 16; i++)
+            out[i] = xi[i] ^ z[i];
+    }
+    /**
+     * Encrypts a 16-byte plaintext block.
+     * @param xi - 16-byte plaintext block
+     * @returns 16-byte ciphertext block
+     */
+    enc(xi) {
+        const out = new Uint8Array(16);
+        this.encTo(xi, out);
+        return out;
+    }
+    /**
+     * Decrypts a 16-byte ciphertext block and writes to output.
+     * @param ci - 16-byte ciphertext block
+     * @param out - 16-byte output buffer
+     */
+    decTo(ci, out) {
+        const z = this.z;
+        const tmp = this.tmp;
+        xorBlocksTo(this.s1, this.s4, z);
+        for (let i = 0; i < 16; i++)
+            z[i] ^= this.s5[i];
+        andBlocksTo(this.s2, this.s3, tmp);
+        for (let i = 0; i < 16; i++)
+            z[i] ^= tmp[i];
+        for (let i = 0; i < 16; i++)
+            out[i] = ci[i] ^ z[i];
+        this.update(out);
+    }
+    /**
+     * Decrypts a 16-byte ciphertext block.
+     * @param ci - 16-byte ciphertext block
+     * @returns 16-byte plaintext block
+     */
+    dec(ci) {
+        const out = new Uint8Array(16);
+        this.decTo(ci, out);
+        return out;
+    }
+    /**
+     * Decrypts a partial (final) ciphertext block smaller than 16 bytes.
+     * @param cn - Partial ciphertext block (1-15 bytes)
+     * @returns Decrypted plaintext of the same length
+     */
+    decPartial(cn) {
+        const z = this.z;
+        const tmp = this.tmp;
+        xorBlocksTo(this.s1, this.s4, z);
+        for (let i = 0; i < 16; i++)
+            z[i] ^= this.s5[i];
+        andBlocksTo(this.s2, this.s3, tmp);
+        for (let i = 0; i < 16; i++)
+            z[i] ^= tmp[i];
+        const t = zeroPad(cn, 16);
+        const out = new Uint8Array(16);
+        for (let i = 0; i < 16; i++)
+            out[i] = t[i] ^ z[i];
+        const xn = new Uint8Array(out.subarray(0, cn.length));
+        const v = zeroPad(xn, 16);
+        this.update(v);
+        return xn;
+    }
+    /**
+     * Finalizes encryption/decryption and produces an authentication tag.
+     * @param adLenBits - Associated data length in bits
+     * @param msgLenBits - Message length in bits
+     * @param tagLen - Tag length (16 or 32 bytes)
+     * @returns Authentication tag
+     */
+    finalize(adLenBits, msgLenBits, tagLen = 16) {
+        const t = this.tBuf;
+        le64To(adLenBits, t, 0);
+        le64To(msgLenBits, t, 8);
+        for (let i = 0; i < 16; i++)
+            t[i] ^= this.s3[i];
+        for (let i = 0; i < 7; i++) {
+            this.update(t);
+        }
+        if (tagLen === 16) {
+            const tag = new Uint8Array(16);
+            for (let i = 0; i < 16; i++) {
+                tag[i] =
+                    this.s0[i] ^
+                        this.s1[i] ^
+                        this.s2[i] ^
+                        this.s3[i] ^
+                        this.s4[i] ^
+                        this.s5[i];
+            }
+            return tag;
+        }
+        else {
+            const tag = new Uint8Array(32);
+            for (let i = 0; i < 16; i++) {
+                tag[i] = this.s0[i] ^ this.s1[i] ^ this.s2[i];
+            }
+            for (let i = 0; i < 16; i++) {
+                tag[16 + i] = this.s3[i] ^ this.s4[i] ^ this.s5[i];
+            }
+            return tag;
+        }
+    }
+}
+/**
+ * Encrypts a message using AEGIS-256.
+ * @param msg - Plaintext message
+ * @param ad - Associated data (authenticated but not encrypted)
+ * @param key - 32-byte encryption key
+ * @param nonce - 32-byte nonce (must be unique per message with the same key)
+ * @param tagLen - Authentication tag length: 16 or 32 bytes (default: 16)
+ * @returns Object containing ciphertext and authentication tag
+ */
+export function aegis256Encrypt(msg, ad, key, nonce, tagLen = 16) {
+    const state = new Aegis256State();
+    state.init(key, nonce);
+    const adPadded = zeroPad(ad, 16);
+    for (let i = 0; i + 16 <= adPadded.length; i += 16) {
+        state.absorb(adPadded.subarray(i, i + 16));
+    }
+    const msgPadded = zeroPad(msg, 16);
+    const ct = new Uint8Array(msgPadded.length);
+    for (let i = 0; i + 16 <= msgPadded.length; i += 16) {
+        state.encTo(msgPadded.subarray(i, i + 16), ct.subarray(i, i + 16));
+    }
+    const tag = state.finalize(BigInt(ad.length * 8), BigInt(msg.length * 8), tagLen);
+    const ciphertext = new Uint8Array(ct.subarray(0, msg.length));
+    return { ciphertext, tag };
+}
+/**
+ * Decrypts a message using AEGIS-256.
+ * @param ct - Ciphertext
+ * @param tag - Authentication tag (16 or 32 bytes)
+ * @param ad - Associated data (must match what was used during encryption)
+ * @param key - 32-byte encryption key
+ * @param nonce - 32-byte nonce (must match what was used during encryption)
+ * @returns Decrypted plaintext, or null if authentication fails
+ */
+export function aegis256Decrypt(ct, tag, ad, key, nonce) {
+    const tagLen = tag.length;
+    const state = new Aegis256State();
+    state.init(key, nonce);
+    const adPadded = zeroPad(ad, 16);
+    for (let i = 0; i + 16 <= adPadded.length; i += 16) {
+        state.absorb(adPadded.subarray(i, i + 16));
+    }
+    const fullBlocksLen = Math.floor(ct.length / 16) * 16;
+    const cn = ct.subarray(fullBlocksLen);
+    const msg = new Uint8Array(fullBlocksLen + (cn.length > 0 ? cn.length : 0));
+    for (let i = 0; i + 16 <= ct.length; i += 16) {
+        state.decTo(ct.subarray(i, i + 16), msg.subarray(i, i + 16));
+    }
+    if (cn.length > 0) {
+        msg.set(state.decPartial(cn), fullBlocksLen);
+    }
+    const expectedTag = state.finalize(BigInt(ad.length * 8), BigInt(msg.length * 8), tagLen);
+    if (!constantTimeEqual(tag, expectedTag)) {
+        msg.fill(0);
+        return null;
+    }
+    return msg;
+}
+/**
+ * Computes a MAC (Message Authentication Code) using AEGIS-256.
+ * @param data - Data to authenticate
+ * @param key - 32-byte key
+ * @param nonce - 32-byte nonce (optional, uses zero nonce if null)
+ * @param tagLen - Tag length: 16 or 32 bytes (default: 16)
+ * @returns Authentication tag
+ */
+export function aegis256Mac(data, key, nonce = null, tagLen = 16) {
+    const state = new Aegis256State();
+    state.init(key, nonce ?? new Uint8Array(32));
+    const dataPadded = zeroPad(data, 16);
+    for (let i = 0; i + 16 <= dataPadded.length; i += 16) {
+        state.absorb(dataPadded.subarray(i, i + 16));
+    }
+    return state.finalize(BigInt(data.length * 8), BigInt(tagLen * 8), tagLen);
+}
+/**
+ * Verifies a MAC computed using AEGIS-256.
+ * @param data - Data to verify
+ * @param tag - Expected authentication tag (16 or 32 bytes)
+ * @param key - 32-byte key
+ * @param nonce - 32-byte nonce (optional, uses zero nonce if null)
+ * @returns True if the tag is valid, false otherwise
+ */
+export function aegis256MacVerify(data, tag, key, nonce = null) {
+    const tagLen = tag.length;
+    const expectedTag = aegis256Mac(data, key, nonce, tagLen);
+    return constantTimeEqual(tag, expectedTag);
+}
+//# sourceMappingURL=aegis256.js.map

package/dist/aegis256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aegis256.js","sourceRoot":"","sources":["../src/aegis256.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,UAAU,EACV,WAAW,EACX,EAAE,EACF,EAAE,EACF,iBAAiB,EACjB,MAAM,EACN,WAAW,EACX,OAAO,GACP,MAAM,UAAU,CAAC;AAElB;;;GAGG;AACH,MAAM,OAAO,aAAa;IAYzB;QACC,IAAI,CAAC,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,CAAC,MAAoB;QACzB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;QACxB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;QACxB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;QACxB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;QACxB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;QACxB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,GAAe,EAAE,KAAiB;QACtC,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAElC,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7B,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7B,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAE7B,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACnC,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAC7B,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,CAAoB;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QAEvB,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACxC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QAEvC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACtB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACtB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACtB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACtB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACtB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,EAAc;QACpB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,EAAc,EAAE,GAAe;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAErB,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC;QACjD,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAE,CAAC;QAE7C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAEhB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,EAAc;QACjB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACpB,OAAO,GAAG,CAAC;IACZ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,EAAc,EAAE,GAAe;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAErB,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC;QACjD,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAE,CAAC;QAE7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,EAAc;QACjB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACpB,OAAO,GAAG,CAAC;IACZ,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,EAAc;QACxB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAErB,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC;QACjD,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAE,CAAC;QAE7C,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACpD,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAEtD,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAEf,OAAO,EAAE,CAAC;IACX,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CACP,SAAiB,EACjB,UAAkB,EAClB,SAAkB,EAAE;QAEpB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACpB,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACxB,MAAM,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC;QAEjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7B,GAAG,CAAC,CAAC,CAAC;oBACL,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE;wBACX,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE;wBACX,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE;wBACX,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE;wBACX,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE;wBACX,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC;YACd,CAAC;YACD,OAAO,GAAG,CAAC;QACZ,CAAC;aAAM,CAAC;YACP,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC;YAClD,CAAC;YACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7B,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC;YACvD,CAAC;YACD,OAAO,GAAG,CAAC;QACZ,CAAC;IACF,CAAC;CACD;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC9B,GAAe,EACf,EAAc,EACd,GAAe,EACf,KAAiB,EACjB,SAAkB,EAAE;IAEpB,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEvB,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACpD,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACrD,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CACzB,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,EACtB,MAAM,CACN,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAE9D,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC9B,EAAc,EACd,GAAe,EACf,EAAc,EACd,GAAe,EACf,KAAiB;IAEjB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAiB,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEvB,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACpD,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IACtD,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAEtC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CACjC,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,EACtB,MAAM,CACN,CAAC;IAEF,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAC1B,IAAgB,EAChB,GAAe,EACf,QAA2B,IAAI,EAC/B,SAAkB,EAAE;IAEpB,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACtD,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAChC,IAAgB,EAChB,GAAe,EACf,GAAe,EACf,QAA2B,IAAI;IAE/B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAiB,CAAC;IACrC,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AAC5C,CAAC"}

package/dist/aegis256x.d.ts

@@ -0,0 +1,149 @@
+/**
+ * AEGIS-256X cipher state with configurable parallelism degree.
+ * Extends AEGIS-256 with parallel AES rounds for improved performance on wide SIMD architectures.
+ */
+export declare class Aegis256XState {
+    private v;
+    private d;
+    private rate;
+    private newV;
+    private tmp;
+    private z;
+    private ctxBufs;
+    /**
+     * Creates a new AEGIS-256X state.
+     * @param degree - Parallelism degree (default: 2). Use 2 for AEGIS-256X2, 4 for AEGIS-256X4.
+     */
+    constructor(degree?: number);
+    /**
+     * Initializes the state with a key and nonce.
+     * @param key - 32-byte encryption key
+     * @param nonce - 32-byte nonce (must be unique per message)
+     */
+    init(key: Uint8Array, nonce: Uint8Array): void;
+    /**
+     * Updates the state with a message vector.
+     * @param m - Message vector (16*degree bytes)
+     */
+    update(m: Uint8Array): void;
+    /**
+     * Absorbs an associated data block into the state.
+     * @param ai - Associated data block (16*degree bytes)
+     */
+    absorb(ai: Uint8Array): void;
+    private computeZ;
+    /**
+     * Encrypts a plaintext block and writes to output buffer.
+     * @param xi - Plaintext block (16*degree bytes)
+     * @param out - Output buffer (16*degree bytes)
+     */
+    encTo(xi: Uint8Array, out: Uint8Array): void;
+    /**
+     * Encrypts a plaintext block.
+     * @param xi - Plaintext block (16*degree bytes)
+     * @returns Ciphertext block of the same size
+     */
+    enc(xi: Uint8Array): Uint8Array;
+    /**
+     * Decrypts a ciphertext block and writes to output buffer.
+     * @param ci - Ciphertext block (16*degree bytes)
+     * @param out - Output buffer (16*degree bytes)
+     */
+    decTo(ci: Uint8Array, out: Uint8Array): void;
+    /**
+     * Decrypts a ciphertext block.
+     * @param ci - Ciphertext block (16*degree bytes)
+     * @returns Plaintext block of the same size
+     */
+    dec(ci: Uint8Array): Uint8Array;
+    /**
+     * Decrypts a partial (final) ciphertext block.
+     * @param cn - Partial ciphertext block (smaller than 16*degree bytes)
+     * @returns Decrypted plaintext of the same length
+     */
+    decPartial(cn: Uint8Array): Uint8Array;
+    /**
+     * Finalizes encryption/decryption and produces an authentication tag.
+     * @param adLenBits - Associated data length in bits
+     * @param msgLenBits - Message length in bits
+     * @param tagLen - Tag length (16 or 32 bytes)
+     * @returns Authentication tag
+     */
+    finalize(adLenBits: bigint, msgLenBits: bigint, tagLen?: 16 | 32): Uint8Array;
+    /**
+     * Finalizes MAC computation and produces an authentication tag.
+     * Uses a different finalization procedure than encryption/decryption.
+     * @param dataLenBits - Data length in bits
+     * @param tagLen - Tag length (16 or 32 bytes)
+     * @returns Authentication tag
+     */
+    finalizeMac(dataLenBits: bigint, tagLen?: 16 | 32): Uint8Array;
+}
+/**
+ * Encrypts a message using AEGIS-256X.
+ * @param msg - Plaintext message
+ * @param ad - Associated data (authenticated but not encrypted)
+ * @param key - 32-byte encryption key
+ * @param nonce - 32-byte nonce (must be unique per message with the same key)
+ * @param tagLen - Authentication tag length: 16 or 32 bytes (default: 16)
+ * @param degree - Parallelism degree (default: 2)
+ * @returns Object containing ciphertext and authentication tag
+ */
+export declare function aegis256XEncrypt(msg: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce: Uint8Array, tagLen?: 16 | 32, degree?: number): {
+    ciphertext: Uint8Array;
+    tag: Uint8Array;
+};
+/**
+ * Decrypts a message using AEGIS-256X.
+ * @param ct - Ciphertext
+ * @param tag - Authentication tag (16 or 32 bytes)
+ * @param ad - Associated data (must match what was used during encryption)
+ * @param key - 32-byte encryption key
+ * @param nonce - 32-byte nonce (must match what was used during encryption)
+ * @param degree - Parallelism degree (default: 2)
+ * @returns Decrypted plaintext, or null if authentication fails
+ */
+export declare function aegis256XDecrypt(ct: Uint8Array, tag: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce: Uint8Array, degree?: number): Uint8Array | null;
+/** AEGIS-256X2 encryption (degree=2). */
+export declare const aegis256X2Encrypt: (msg: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce: Uint8Array, tagLen?: 16 | 32) => {
+    ciphertext: Uint8Array;
+    tag: Uint8Array;
+};
+/** AEGIS-256X2 decryption (degree=2). */
+export declare const aegis256X2Decrypt: (ct: Uint8Array, tag: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce: Uint8Array) => Uint8Array<ArrayBufferLike> | null;
+/** AEGIS-256X4 encryption (degree=4). */
+export declare const aegis256X4Encrypt: (msg: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce: Uint8Array, tagLen?: 16 | 32) => {
+    ciphertext: Uint8Array;
+    tag: Uint8Array;
+};
+/** AEGIS-256X4 decryption (degree=4). */
+export declare const aegis256X4Decrypt: (ct: Uint8Array, tag: Uint8Array, ad: Uint8Array, key: Uint8Array, nonce: Uint8Array) => Uint8Array<ArrayBufferLike> | null;
+/**
+ * Computes a MAC (Message Authentication Code) using AEGIS-256X.
+ * @param data - Data to authenticate
+ * @param key - 32-byte key
+ * @param nonce - 32-byte nonce (optional, uses zero nonce if null)
+ * @param tagLen - Tag length: 16 or 32 bytes (default: 16)
+ * @param degree - Parallelism degree (default: 2)
+ * @returns Authentication tag
+ */
+export declare function aegis256XMac(data: Uint8Array, key: Uint8Array, nonce?: Uint8Array | null, tagLen?: 16 | 32, degree?: number): Uint8Array;
+/**
+ * Verifies a MAC computed using AEGIS-256X.
+ * @param data - Data to verify
+ * @param tag - Expected authentication tag (16 or 32 bytes)
+ * @param key - 32-byte key
+ * @param nonce - 32-byte nonce (optional, uses zero nonce if null)
+ * @param degree - Parallelism degree (default: 2)
+ * @returns True if the tag is valid, false otherwise
+ */
+export declare function aegis256XMacVerify(data: Uint8Array, tag: Uint8Array, key: Uint8Array, nonce?: Uint8Array | null, degree?: number): boolean;
+/** AEGIS-256X2 MAC computation (degree=2). */
+export declare const aegis256X2Mac: (data: Uint8Array, key: Uint8Array, nonce?: Uint8Array | null, tagLen?: 16 | 32) => Uint8Array<ArrayBufferLike>;
+/** AEGIS-256X2 MAC verification (degree=2). */
+export declare const aegis256X2MacVerify: (data: Uint8Array, tag: Uint8Array, key: Uint8Array, nonce?: Uint8Array | null) => boolean;
+/** AEGIS-256X4 MAC computation (degree=4). */
+export declare const aegis256X4Mac: (data: Uint8Array, key: Uint8Array, nonce?: Uint8Array | null, tagLen?: 16 | 32) => Uint8Array<ArrayBufferLike>;
+/** AEGIS-256X4 MAC verification (degree=4). */
+export declare const aegis256X4MacVerify: (data: Uint8Array, tag: Uint8Array, key: Uint8Array, nonce?: Uint8Array | null) => boolean;
+//# sourceMappingURL=aegis256x.d.ts.map

package/dist/aegis256x.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aegis256x.d.ts","sourceRoot":"","sources":["../src/aegis256x.ts"],"names":[],"mappings":"AAaA;;;GAGG;AACH,qBAAa,cAAc;IAC1B,OAAO,CAAC,CAAC,CAAiB;IAC1B,OAAO,CAAC,CAAC,CAAS;IAClB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,CAAC,CAAa;IACtB,OAAO,CAAC,OAAO,CAAe;IAE9B;;;OAGG;gBACS,MAAM,GAAE,MAAU;IAmB9B;;;;OAIG;IACH,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI;IAmE9C;;;OAGG;IACH,MAAM,CAAC,CAAC,EAAE,UAAU,GAAG,IAAI;IAsB3B;;;OAGG;IACH,MAAM,CAAC,EAAE,EAAE,UAAU,GAAG,IAAI;IAI5B,OAAO,CAAC,QAAQ;IAahB;;;;OAIG;IACH,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI;IAU5C;;;;OAIG;IACH,GAAG,CAAC,EAAE,EAAE,UAAU,GAAG,UAAU;IAO/B;;;;OAIG;IACH,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI;IAS5C;;;;OAIG;IACH,GAAG,CAAC,EAAE,EAAE,UAAU,GAAG,UAAU;IAO/B;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,UAAU,GAAG,UAAU;IAgBtC;;;;;;OAMG;IACH,QAAQ,CACP,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,EAAE,GAAG,EAAO,GAClB,UAAU;IAsCb;;;;;;OAMG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,GAAE,EAAE,GAAG,EAAO,GAAG,UAAU;CA4DlE;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC/B,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,UAAU,EACjB,MAAM,GAAE,EAAE,GAAG,EAAO,EACpB,MAAM,GAAE,MAAU,GAChB;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,UAAU,CAAA;CAAE,CA4B7C;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC/B,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,UAAU,EACjB,MAAM,GAAE,MAAU,GAChB,UAAU,GAAG,IAAI,CAoCnB;AAED,yCAAyC;AACzC,eAAO,MAAM,iBAAiB,GAC7B,KAAK,UAAU,EACf,IAAI,UAAU,EACd,KAAK,UAAU,EACf,OAAO,UAAU,EACjB,SAAQ,EAAE,GAAG,EAAO;gBA3FJ,UAAU;SAAO,UAAU;CA4FS,CAAC;AAEtD,yCAAyC;AACzC,eAAO,MAAM,iBAAiB,GAC7B,IAAI,UAAU,EACd,KAAK,UAAU,EACf,IAAI,UAAU,EACd,KAAK,UAAU,EACf,OAAO,UAAU,uCAC+B,CAAC;AAElD,yCAAyC;AACzC,eAAO,MAAM,iBAAiB,GAC7B,KAAK,UAAU,EACf,IAAI,UAAU,EACd,KAAK,UAAU,EACf,OAAO,UAAU,EACjB,SAAQ,EAAE,GAAG,EAAO;gBA7GJ,UAAU;SAAO,UAAU;CA8GS,CAAC;AAEtD,yCAAyC;AACzC,eAAO,MAAM,iBAAiB,GAC7B,IAAI,UAAU,EACd,KAAK,UAAU,EACf,IAAI,UAAU,EACd,KAAK,UAAU,EACf,OAAO,UAAU,uCAC+B,CAAC;AAElD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC3B,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,UAAU,EACf,KAAK,GAAE,UAAU,GAAG,IAAW,EAC/B,MAAM,GAAE,EAAE,GAAG,EAAO,EACpB,MAAM,GAAE,MAAU,GAChB,UAAU,CAYZ;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CACjC,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,UAAU,EACf,KAAK,GAAE,UAAU,GAAG,IAAW,EAC/B,MAAM,GAAE,MAAU,GAChB,OAAO,CAIT;AAED,8CAA8C;AAC9C,eAAO,MAAM,aAAa,GACzB,MAAM,UAAU,EAChB,KAAK,UAAU,EACf,QAAO,UAAU,GAAG,IAAW,EAC/B,SAAQ,EAAE,GAAG,EAAO,gCACyB,CAAC;AAE/C,+CAA+C;AAC/C,eAAO,MAAM,mBAAmB,GAC/B,MAAM,UAAU,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,QAAO,UAAU,GAAG,IAAW,YACiB,CAAC;AAElD,8CAA8C;AAC9C,eAAO,MAAM,aAAa,GACzB,MAAM,UAAU,EAChB,KAAK,UAAU,EACf,QAAO,UAAU,GAAG,IAAW,EAC/B,SAAQ,EAAE,GAAG,EAAO,gCACyB,CAAC;AAE/C,+CAA+C;AAC/C,eAAO,MAAM,mBAAmB,GAC/B,MAAM,UAAU,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,QAAO,UAAU,GAAG,IAAW,YACiB,CAAC"}