A .NET implementation of the KIVR transform for AEAD context commitment.
Note
KIVR should be implemented for a specific protocol with redundancy (e.g. magic bytes) rather than in a generic library like this to eliminate ciphertext expansion and plaintext copying overhead. Furthermore, an XOF or collision-resistant KDF should be used instead of a hash function to output a larger mask for greater (e.g. 128-bit) committing security.