Xoofff is a deck function, on top of which we define simple modes:

• Xoofff-SANE, an authenticated encryption scheme supporting sessions, like Ketje and Keyak;
• Xoofff-SANSE, an authenticated encryption scheme supporting sessions and using the synthetic initial value (SIV) technique, robust under nonce repetitions;
• Xoofff-WBC, a wide-block cipher for authenticated encryption with minimal expansion.

Xoofff builds upon the Xoodoo permutations and the novel Farfalle construction, which can somehow be seen as the parallel counterpart of the sponge construction. It thus provides inherent parallelism that can be readily exploited on platforms supporting SIMD instruction sets or multiple cores. It is also very efficient on low-end processors.