AEGIS-128L and AEGIS-256 with the 256-bit tag libsodium uses, over plain byte arrays.
Neither is in @noble/ciphers, so the AES round is written out here: one AESENC is
SubBytes, ShiftRows, MixColumns and a key XOR. The constants and the update schedule follow the
CFRG AEGIS draft; the gate checks them against native libsodium.
AEGIS-128L and AEGIS-256 with the 256-bit tag libsodium uses, over plain byte arrays.
Neither is in
@noble/ciphers, so the AES round is written out here: oneAESENCis SubBytes, ShiftRows, MixColumns and a key XOR. The constants and the update schedule follow the CFRG AEGIS draft; the gate checks them against native libsodium.