Generate TurboSHAKE256 - high-security 12-round Keccak XOF with 256-bit security.
About
TurboSHAKE256 is a high-security reduced-round XOF using 12-round Keccak-f[1600] with 512-bit capacity, combining 256-bit security with faster Keccak operations. Based on the Keccak teams draft specification, not yet standardized by NIST or IETF.
Specifications
Output SizeVariable
StandardTurboSHAKE specification (Keccak Team)
Standard Year2022
Use Cases
—High-security fast XOF applications
—Fast post-quantum key derivation
—Performance-critical masking
—High-speed high-security protocols
—Experimental fast cryptography
Frequently Asked Questions
TurboSHAKE256 provides 256-bit security versus 128-bit for TurboSHAKE128. Use it for high-security applications needing the speed benefits of reduced-round Keccak. Both are experimental; TurboSHAKE256 is the higher-security variant.
The D parameter (default 0x1F) provides domain separation between different TurboSHAKE instances. Different D values produce unrelated outputs. This allows deriving multiple independent XOF streams from the same input with different D values.
Both use 12-round Keccak. TurboSHAKE256 is an XOF (variable output); K12 is primarily a fixed-output hash with tree structure. TurboSHAKE256 is simpler; K12 has better parallelization for large data. Both are experimental high-speed alternatives to SHA-3.