All cryptographic primitives used have been publicly verified with extensive cryptanalysis. Further, all are recognised as post-quantum safe, meaning that they provide long term security and resistance to attack by quantum computers.

• Block cipher: AES-256.
• Authenticated encryption with associated data (AEAD) scheme: AES-256 block cipher used in the Galois counter mode authenticated encryption function described in Morris J. Dworkin, “Recommendation for block cipher modes of operation: Galois/counter mode (gcm) and gmac”, 2007. NIST special publication 800-38D.
• Deterministic authenticated encryption with associated data scheme: AES-256 block cipher used in the SIV authenticated encryption mode algorithm described in P. Rogaway and T. Shrimpton, “Deterministic authenticated encryption”, 2007.
• Fixed input-length pseudorandom function: AES-256 block cipher with key length 256 bits and input length 128 bits generating a pseudorandom output length 128 bits.
• Variable input-length pseudorandom function: Uses the authentication tag generated by the authenticated encryption (AEAD) scheme with the initialization vector set to the input and empty plaintext and associated data.