Philbin: the safest (and fastest) AEGIS library
Philbin is a new pure-Rust implementation of the standardized AEGIS authenticated-encryption algorithms, with runtime CPU-feature dispatch and an API designed to reduce nonce/key misuse.
The author reports two unsafe blocks, test-vector coverage, differential fuzzing against libaegis, and a Test Vector Leakage Assessment harness for timing behavior. The performance comparisons are the author’s own multi-CPU benchmarks—not an independent audit—and the article notes the comparison crate was built with -mtune=native, which can favor its build CPU. The project currently does not support no_std.
Rust commenters debated whether TVLA is a useful constant-time check and raised distribution assumptions; others pointed out that no_std and WebAssembly support have practical trade-offs. The author engaged with those caveats. This is promising implementation work, not a substitute for independent cryptographic review.