Assuming all inputs are same length as rate except last can be shorter. Is it necessary to pad every input (not just last) to sponge for authenticated encryption to be secure? Is this just, because ...
I have been reading the Cryptographic sponge functions paper, but I'm still confused. Does Keccak in authenticated encryption mode absorb ciphertext or plaintext? Edit: Are there any test vectors to ...