"crypto/internal/fips140/subtle"
"crypto/internal/fips140deps/cpu"
"crypto/internal/impl"
"bytes"
"crypto/internal/fips140"
"crypto/internal/fips140deps/byteorder"
"errors"
"math/bits"
"bytes"
"crypto/internal/fips140"
"errors"
"crypto/internal/fips140deps/byteorder"
"crypto/internal/fips140deps/cpu"
"math/bits"
"unsafe"
"crypto/internal/fips140"
"crypto/internal/fips140/subtle"
"errors"
const dsbyteCShake = 0b00000100const dsbyteKeccak = 0b00000001const dsbyteSHA3 = 0b00000110const dsbyteShake = 0b00011111const magicCShake = "sha\x0a"const magicKeccak = "sha\x0b"const magicSHA3 = "sha\x08"const magicShake = "sha\x09"magic || rate || main state || n || sponge direction
const marshaledSize = *ast.BinaryExprconst nopad = 0x100const rateK1024 = *ast.BinaryExprrateK[c] is the rate in bytes for Keccak[c] where c is the capacity in bits. Given the sponge size is 1600 bits, the rate is 1600 - c bits.
const rateK256 = *ast.BinaryExprconst rateK448 = *ast.BinaryExprconst rateK512 = *ast.BinaryExprconst rateK768 = *ast.BinaryExprrc stores the round constants for use in the ι step.
var rc = [24]uint64{...}Function codes for KIMD/KLMD, from Figure 7-207.
const sha3_224 code = 32const sha3_256 code = 33const sha3_384 code = 34const sha3_512 code = 35const shake_128 code = 36const shake_256 code = 37spongeAbsorbing indicates that the sponge is absorbing input.
const spongeAbsorbing spongeDirection = iotaspongeSqueezing indicates that the sponge is being squeezed.
const spongeSqueezingvar useSHA3 = cpu.S390XHasSHA3codes represent 7-bit KIMD/KLMD function codes as defined in the Principles of Operation.
type code uint64spongeDirection indicates the direction bytes are flowing through the sponge.
type spongeDirection inttype Digest struct {
a [*ast.BinaryExpr]byte
n int
rate int
dsbyte byte
outputLen int
state spongeDirection
}type SHAKE struct {
d Digest
initBlock []byte
}func (d *Digest) AppendBinary(b []byte) ([]byte, error)func (s *SHAKE) AppendBinary(b []byte) ([]byte, error)BlockSize returns the rate of sponge underlying this hash function.
func (d *Digest) BlockSize() intfunc (s *SHAKE) BlockSize() intfunc (d *Digest) Clone() *DigestClone returns a copy of the SHAKE context in its current state.
func (s *SHAKE) Clone() *SHAKEfunc (d *Digest) MarshalBinary() ([]byte, error)func (s *SHAKE) MarshalBinary() ([]byte, error)New224 returns a new Digest computing the SHA3-224 hash.
func New224() *DigestNew256 returns a new Digest computing the SHA3-256 hash.
func New256() *DigestNew384 returns a new Digest computing the SHA3-384 hash.
func New384() *DigestNew512 returns a new Digest computing the SHA3-512 hash.
func New512() *DigestNewCShake128 creates a new cSHAKE128 XOF. N is used to define functions based on cSHAKE, it can be empty when plain cSHAKE is desired. S is a customization byte string used for domain separation. When N and S are both empty, this is equivalent to NewShake128.
func NewCShake128(N []byte, S []byte) *SHAKENewCShake256 creates a new cSHAKE256 XOF. N is used to define functions based on cSHAKE, it can be empty when plain cSHAKE is desired. S is a customization byte string used for domain separation. When N and S are both empty, this is equivalent to NewShake256.
func NewCShake256(N []byte, S []byte) *SHAKENewLegacyKeccak256 returns a new Digest computing the legacy, non-standard Keccak-256 hash.
func NewLegacyKeccak256() *DigestNewLegacyKeccak512 returns a new Digest computing the legacy, non-standard Keccak-512 hash.
func NewLegacyKeccak512() *DigestNewShake128 creates a new SHAKE128 XOF.
func NewShake128() *SHAKENewShake256 creates a new SHAKE256 XOF.
func NewShake256() *SHAKEfunc (s *SHAKE) Read(out []byte) (n int, err error)Reset resets the Digest to its initial state.
func (d *Digest) Reset()Reset resets the hash to initial state.
func (s *SHAKE) Reset()func (s *SHAKE) Size() intSize returns the output size of the hash function in bytes.
func (d *Digest) Size() intSum appends the current hash to b and returns the resulting slice. It does not change the underlying hash state.
func (d *Digest) Sum(b []byte) []byteSum appends a portion of output to b and returns the resulting slice. The output length is selected to provide full-strength generic security: 32 bytes for SHAKE128 and 64 bytes for SHAKE256. It does not change the underlying state. It panics if any output has already been read.
func (s *SHAKE) Sum(in []byte) []bytefunc (s *SHAKE) UnmarshalBinary(b []byte) errorfunc (d *Digest) UnmarshalBinary(b []byte) errorWrite absorbs more data into the hash's state. It panics if any output has already been read.
func (s *SHAKE) Write(p []byte) (n int, err error)Write absorbs more data into the hash's state.
func (d *Digest) Write(p []byte) (n int, err error)func bytepad(data []byte, rate int) []bytefunc (d *Digest) function() codefunc init()func init()func keccakF1600(a *[200]byte)go:noescape
func keccakF1600(a *[200]byte)func keccakF1600(a *[200]byte)keccakF1600Generic applies the Keccak permutation.
func keccakF1600Generic(da *[200]byte)kimd is a wrapper for the 'compute intermediate message digest' instruction. src is absorbed into the sponge state a. len(src) must be a multiple of the rate for the given function code. go:noescape
func kimd(function code, a *[200]byte, src []byte)klmd is a wrapper for the 'compute last message digest' instruction. src is padded and absorbed into the sponge state a. If the function is a SHAKE XOF, the sponge is then optionally squeezed into dst by first applying the permutation and then copying the output until dst runs out. If len(dst) is a multiple of rate (including zero), the final permutation is not applied. If the nopad bit of function is set and len(src) is zero, only squeezing is performed. go:noescape
func klmd(function code, a *[200]byte, dst []byte, src []byte)func leftEncode(x uint64) []bytefunc newCShake(N []byte, S []byte, rate int, outputLen int, dsbyte byte) *SHAKEpadAndPermute appends the domain separation bits in dsbyte, applies the multi-bitrate 10..1 padding rule, and permutes the state.
func (d *Digest) padAndPermute()permute applies the KeccakF-1600 permutation.
func (d *Digest) permute()func (d *Digest) read(out []byte) (n int, err error)func (d *Digest) read(out []byte) (n int, err error)func (d *Digest) read(out []byte) (n int, err error)read squeezes an arbitrary number of bytes from the sponge.
func (d *Digest) readGeneric(out []byte) (n int, err error)func (d *Digest) sum(b []byte) []bytefunc (d *Digest) sum(b []byte) []bytefunc (d *Digest) sum(b []byte) []bytefunc (d *Digest) sumGeneric(b []byte) []bytefunc (d *Digest) write(p []byte) (n int, err error)func (d *Digest) write(p []byte) (n int, err error)func (d *Digest) write(p []byte) (n int, err error)func (d *Digest) writeGeneric(p []byte) (n int, err error)Generated with Arrow