Generate TurboSHAKE128 - fast 12-round Keccak XOF with domain separation bytes.
About
TurboSHAKE128 is a reduced-round XOF using 12-round Keccak-f[1600] with 256-bit capacity, providing faster XOF operations with domain separation through the D parameter. Based on the Keccak teams draft specification, not yet standardized by NIST or IETF.
Specifications
Output SizeVariable
StandardTurboSHAKE specification (Keccak Team)
Standard Year2022
Use Cases
—Fast extendable-output functions
—High-speed key derivation
—Performance-critical XOF applications
—Domain-separated fast hashing
—Experimental high-speed cryptography
Frequently Asked Questions
TurboSHAKE is a fast XOF using 12-round Keccak instead of 24, with domain separation via the D parameter. It's roughly 2x faster than SHAKE128. It's defined by the Keccak team as an experimental high-speed alternative.
Use TurboSHAKE128 for experimental high-speed applications where the 2x speedup justifies using a less standardized algorithm. For production systems requiring standards compliance, stick with SHAKE128 or SHAKE256.
TurboSHAKE is considered experimental by the Keccak team. While the security analysis is promising, it lacks the extensive review and standardization of SHAKE. Use with caution in production; prefer SHAKE for critical applications.