Xoofff is a deck function, on top of which we define simple modes:

  • Xoofff-SANE, an authenticated encryption scheme supporting sessions, like Ketje and Keyak;
  • Xoofff-SANSE, an authenticated encryption scheme supporting sessions and using the synthetic initial value (SIV) technique, robust under nonce repetitions;
  • Xoofff-WBC, a wide-block cipher for authenticated encryption with minimal expansion.

Xoofff builds upon the Xoodoo permutations and the novel Farfalle construction, which can somehow be seen as the parallel counterpart of the sponge construction. It thus provides inherent parallelism that can be readily exploited on platforms supporting SIMD instruction sets or multiple cores. It is also very efficient on low-end processors.

Technical details

SynopsisThe Xoofff deck function
Designed byJoan Daemen, Seth Hoffert, Gilles Van Assche and Ronny Van Keer
ImplementsA deck function
ConstructionThe Farfalle construction
PrimitiveThe Xoodoo[6] permutation and specific rolling functions
Parameterized byNo parameter
InstancesJust Xoofff.
StatusRelies on strong components, but otherwise only recently published.