The paper The sponge construction as a source of secure cryptographic primitives (see Figure 6) mentions a synchronous sponge mode (working like CTR or OFB modes). So, this type of sponge is a non-authenticated mode. Are there any examples of this type?

Another question: What is the motivation of this type of sponge? As I know, the best reason for using sponges for encryption is to get rid of the need to do Galois multiplication which is slow for IoT devices. Can sponge be as fast as AES-CTR encryption?

  • $\begingroup$ Lol ` The effectiveness of the method was confirmed by third-party cryptanalysis` $\endgroup$
    – kelalaka
    Mar 7, 2021 at 18:34
  • $\begingroup$ Lol2 Salted hashing $\endgroup$
    – kelalaka
    Mar 7, 2021 at 18:43
  • $\begingroup$ @kelalaka 1-) I said that "Are there any examples of this type?" Can you show examples and their third-party cryptanalysis? Note that there is no cipher of this type among the NIST submissions. 2-) I am not mentioning hash functions. I just meant encryptions. $\endgroup$
    – user
    Mar 8, 2021 at 8:32


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.