New answers tagged


Standard KMAC is more than that thanks to domain separation prefixes; NIST SP 800-185 KMAC128(K, X, L, S): Validity Conditions: $\text{len}(K) < 2^{2040}$ and $0 \le L < 2^{2040}$ and $\text{len}(S) < 2^{2040}$ newX = bytepad(encode_string(K), 168) || X || right_encode(L). return cSHAKE128(newX, L, “KMAC”, S). and cSHAKE128(X, L, N, S): ...


in chapter 5, the padding function pad: P = 1 || 0^j || 1 ,has two purposes, one for example, another one is, it shows a multi-rate padding for a bit-aligned message. however, the message in sha3 is byte-aligned, so another multi-rate padding function is provided in Appendix B.2.

Top 50 recent answers are included