A tiny, self-contained cryptography library, implementing authenticated encryption and keyed hashing.
Charm uses the Xoodoo[12](paper, presentation) permutation (which can be replaced by AES-based simpira384 or Gimli) in a duplex mode.
The Xoodoo implementations in Charm are formally verified against a Cryptol specification.
Users:
Other implementations: