The cryptographic sponge and duplex constructions