Generate cSHAKE256 customizable XOF with 256-bit security and NIST SP 800-185 domain separation.
About
cSHAKE256 is a customizable extendable-output function defined in NIST SP 800-185, providing 256-bit security with optional function-name and personalization parameters for domain-separated XOF applications.
Specifications
Output SizeVariable
StandardNIST SP 800-185
Standard Year2016
Origin Keccak submission to NIST SHA-3 competition
Origin Year 2008
Use Cases
—High-security protocol XOF requirements
—Domain-separated key derivation
—NIST-compliant high-security randomness
—Advanced cryptographic protocol design
—Post-quantum cryptography preparations
Frequently Asked Questions
cSHAKE256 provides 256-bit security versus 128-bit for cSHAKE128. Use cSHAKE256 for high-security applications, post-quantum cryptography preparations, or when you need longer output security margins. cSHAKE128 is sufficient for most standard applications.
cSHAKE256 is used in high-security protocols requiring domain separation, such as advanced key derivation, post-quantum cryptographic protocols, and applications requiring both customizable hashing and 256-bit security levels.
cSHAKE256 is an XOF (arbitrary length output) with domain separation built-in. HKDF uses HMAC with extract-expand stages. cSHAKE is simpler for XOF needs; HKDF is more established for key derivation. Both are secure when used correctly.