# Synchronous Sponges

The paper The sponge construction as a source of secure cryptographic primitives (see Figure 6) mentions a synchronous sponge mode (working like CTR or OFB modes). So, this type of sponge is a non-authenticated mode. Are there any examples of this type?

Another question: What is the motivation of this type of sponge? As I know, the best reason for using sponges for encryption is to get rid of the need to do Galois multiplication which is slow for IoT devices. Can sponge be as fast as AES-CTR encryption?

• Lol  The effectiveness of the method was confirmed by third-party cryptanalysis – kelalaka Mar 7 at 18:34
• Lol2 Salted hashing – kelalaka Mar 7 at 18:43
• @kelalaka 1-) I said that "Are there any examples of this type?" Can you show examples and their third-party cryptanalysis? Note that there is no cipher of this type among the NIST submissions. 2-) I am not mentioning hash functions. I just meant encryptions. – user Mar 8 at 8:32