Lightweight authenticated encryption with enhanced security margin. Uses 400-bit Keccak-p permutation with 128-bit key and 32-byte rate.
| Property | Value |
|---|---|
| Category | Authenticated Encryption |
| Sub-category | Authenticated Encryption |
| Variant | sr |
| Security status | Not classified |
| Complexity | Advanced |
| Inventor | Guido Bertoni, Joan Daemen, Michaël Peeters, Gilles Van Assche, Ronny Van Keer |
| Year | 2016 |
| Origin | 🌐 International |
| Source | algorithms/aead/ketje.js |
| Parameter | Supported values |
|---|---|
| Key sizes | 16 bytes (128 bits) |
| Tag sizes | 16 bytes (128 bits) |
| Flag | Value |
|---|---|
SupportsDetached |
No |
Status: not classified — treat as unverified.
No vulnerabilities are recorded for this implementation.
3 vectors ship with this algorithm and run in the test suite. Byte values are hexadecimal.
Vector 1 — Ketje Sr: Empty message
| Field | Value |
|---|---|
key |
000102030405060708090a0b0c0d0e0f |
nonce |
101112131415161718191a1b1c1d1e1f |
aad |
(empty) |
input |
(empty) |
expected |
a43bd96529a5ec5286ea168d34027c05 |
Vector 2 — Ketje Sr: 16-byte plaintext
| Field | Value |
|---|---|
key |
000102030405060708090a0b0c0d0e0f |
nonce |
101112131415161718191a1b1c1d1e1f |
aad |
(empty) |
input |
00112233445566778899aabbccddeeff |
expected |
e8c5f20762f1e6b93a41ab6e32725f5ea6d6e37f7e3dd7f06d02dec9b9f12504 |
Vector 3 — Ketje Sr: 15-byte plaintext with 14-byte AAD
| Field | Value |
|---|---|
key |
000102030405060708090a0b0c0d0e0f |
nonce |
101112131415161718191a1b1c1d1e1f |
aad |
6164646974696f6e616c2064617461 |
input |
746865207365637265742074657874 |
expected |
ea4ed1ff4837daadb4092be77c2cbb54a432e8abbe4667f8e11033a512c5df |