Lyo.Encryption.AesSiv 2.0.0

Lyo.Encryption.AesSiv

AES-SIV (RFC 5297) deterministic authenticated encryption addon for Lyo.Encryption. Provides AesSivEncryptionService backed by Dorssel.Security.Cryptography.AesExtra and matching DI extensions.

Install this addon only when you actually use AES-SIV. The core Lyo.Encryption package no longer pulls Dorssel.Security.Cryptography.AesExtra.

Examples

Unkeyed

using Lyo.Encryption;
using Lyo.Encryption.AesSiv;
using Lyo.Encryption.Extensions;
using Lyo.Encryption.Symmetric.Aes.AesSiv;
using Lyo.KeyStore;
using Microsoft.Extensions.DependencyInjection;

services.AddLocalKeyStore(ks => ks.UpdateKeyFromString("k", "secret"));
services.AddAesSivEncryption(AesSivKeySizeBits.Bits256); // or Bits384 / Bits512
services.AddDefaultEncryptionService<AesSivEncryptionService>();

Keyed two-key

services.AddKeyedLocalKeyStore("ks", ks => ks.UpdateKeyFromString("k", "secret"));
services.AddAesSivEncryptionServiceKeyed("primary", "ks", AesSivKeySizeBits.Bits384);

Benchmarks

• Benchmark summary

Dependency injection

Requires IKeyStore. Configure keys with AddLocalKeyStore / AddKeyedLocalKeyStore and read IConfiguration inside the configure callback (see Lyo.KeyStore).

Keyed two-key

See Lyo.Encryption for the registration table and core AddEncryptionServiceKeyed overloads.

Performance

BenchmarkDotNet on Intel Core Ultra 7 155U (.NET 10.0.9, June 2026): 17.0 ms encrypt / 16.4 ms decrypt @ 1 MB (~25× slower than AES-GCM). Deterministic SIV mode. Choose for nonce-misuse resistance, not peak throughput. Tables: BENCHMARK_SUMMARY.md.

Dependencies

Generated from ProjectReference / PackageReference (same model as docs/Lyo.ProjectGraph.html).

• Lyo.Common.Metadata (direct, lyo)
• Lyo.Encryption (direct, lyo)
• Dorssel.Security.Cryptography.AesExtra 2.0.0 (direct, third-party)
• Lyo.Common.Core (transitive, lyo)
• Lyo.Exceptions (transitive, lyo)
• Lyo.Hashing (transitive, lyo)
• Lyo.KeyStore (transitive, lyo)
• Lyo.Result (transitive, lyo)
• Lyo.Streams (transitive, lyo)
• BouncyCastle.Cryptography 2.6.2 (transitive, third-party, netstandard2.0)
• Konscious.Security.Cryptography.Argon2 1.3.1 (transitive, third-party)
• Microsoft.Bcl.AsyncInterfaces 10.0.5 (transitive, microsoft, netstandard2.0)
• Microsoft.Extensions.DependencyInjection.Abstractions 10.0.5 (transitive, microsoft, net10.0, netstandard2.0)
• System.Buffers 4.6.1 (transitive, microsoft, netstandard2.0)
• System.IO.Hashing 10.0.5 (transitive, microsoft, net10.0)
• System.Memory 4.6.3 (transitive, microsoft, netstandard2.0)
• System.Text.Json 10.0.5 (transitive, microsoft, netstandard2.0)
• System.Threading.Tasks.Extensions 4.6.3 (transitive, microsoft, netstandard2.0)