Which ciphers have been defined that use the Keccak sponge?

Maarten Bodewes

1/26/24, 4:59 PM

There seem to have been defined multiple ciphers using the Keccak sponge as building block / primitive. These seem to have escaped public attention, possibly because they have not been standardized and because current ciphers seem to cover most use cases.

I'd like to know:

Which ones have been defined?
What are the differences between them?
And which purpose do they serve?

Do these have any advantages over current ciphers and cipher modes such as AES-CTR, AES-GCM and Salsa20/Poly1305?

1 + 1

modes-of-operation

authenticated-encryption

sponge

keccak

Maarten Bodewes

1/26/24, 6:35 PM

I know at least about Ketje and Keyak. Apparently Xoodoo and related algorithms are not directly based on Keccak.

Score:4

Crypto

Wilson

1/26/24, 5:28 PM

Since keccak is a relatively large permutation, implementing other symmetric schemes based on keccak besides hashing is concretely expensive. Especially given that AES has hardware acceleration on a lot of chips. However, given the versatility of the sponge duplex constructions for symmetric primitives, the Keccak Team designed a separate family of permutations called Xoodoo; that are more lightweight, but achieve a smaller security margin.

The family of cryptographic schemes based on Xoodoo is called Xoodyak. The Xoodyak constructions are finalists in the NIST Lightweight Cryptography Competition. The benefit is that since all the schemes are based on the Xoodoo permutation, a much smaller amount of code is required for a variety of symmetric primitives, which make it perfect for IOT devices.

+ 2

Maarten Bodewes

1/26/24, 8:00 PM

That's interesting for sure but a it doesn't seem to use Keccak I'm not sure it answers the question directly. I know of at least twi ciphered that do use Keccak.

Wilson

1/26/24, 10:25 PM

Yes, I agree this doesn't directly answer the question. The reason why I mention Xoodyak is because it's a NIST finalist, which is in itself a standardization process.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Which ciphers have been defined that use the Keccak sponge?

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.