Blake min bytes seems to be incorrect

[timmc]

The GenericHash interface defines BLAKE2B_BYTES_MIN = 16 but from experimentation, the library is happy to produce outputs as low as 1 byte.

lazysodium-java/src/main/java/com/goterl/lazysodium/interfaces/GenericHash.java

Line 20 in 64dc785

BLAKE2B_BYTES_MIN = 16,

[mormegil-cz]

That’s just the libsodium’s constant published for Java. The constant does not say “the library won’t produce smaller outputs”, it says “this is the minimum amount of bytes for the hash to be useful”, i.e. “for it to be distinguishing enough”, but you usually want even more, at least crypto_generichash_BYTES, as “[t]his size makes it practically impossible for two messages to produce the same fingerprint.” (See https://doc.libsodium.org/hashing/generic_hashing)

[timmc]

Ah, I see -- I was interpreting as something to be used as an array bounds check, which is what some similarly named constants are used for (or intended to be used for).

There actually are uses for shorter digests even though they aren't collision-resistant, but it sounds like the library will still allow producing these, in which case this can be closed out. (Not in a position to test at this moment.)