The Keccak Team

Permute and squeeze. The root of all the good things. #fse2026

TurboSHAKE: SHAKE on Steroids by @meanjanroy itzmeanjan.in/pages/turbosha…

It is the first time that a 5-round pre-image challenge of our Crunchy Contest is solved! Congratulations to Xiaoen Lin, Hongbo Yu, Enming Dong, Wenhao Wu and Yantian Shen!!! keccak.team/2025/crunchy_o…

@paulmillr @KeccakTeam The most exciting part is that it will help make round-reduced Keccak-p more widely accepted, and promote the deployment of permutation-based cryptography in general. Hopefully, NIST will follow.

KangarooTwelve (RFC9861) benchmark of the pure Zig implementation. Not bad for large inputs. github.com/jedisct1/zig-k… /cc @KeccakTeam #ziglang

RFC 9861: TurboSHAKE and KangarooTwelve, the fast alternatives to SHA-3 and SHAKE keccak.team/2025/rfc9861.h…

RFC 9861 - KangarooTwelve and TurboSHAKE rfc-editor.org/info/rfc9861

Keccak Crunchy Crypto Collision and Pre-image Contest: new challenges solved! keccak.team/2024/crunchy_m…

CIRCL, @Cloudflare's Go crypto library, now supports @KeccakTeam's KangarooTwelve. github.com/cloudflare/cir… Hash at 3.2 GB/s on M2 Pro; and 1.9 GB/s on old i5-1038 with AVX2.

@cryptodavidw Thank you!!!

Woop woop! Congrats on SHA-3, and all the sponge/duplex algorithms that followed!

@ksnf3000 @guido_bertoni Thank you!!!

@mtrimoska Thank you!!!

Congrats to @KeccakTeam !!

I've been working on implementing Xoofff - a deck function ( Doubly Extendable Cryptographic Keyed 😮 ), which is an instantiation of Farfalle construction with 6 -rounds 384 -bit Xoodoo permutation. Find my work @ github.com/itzmeanjan/xoo… as a #rustlang library @KeccakTeam 🙌

We are very happy about this award. Glad to see so many sponges around!

@rusydimakarim Thank you!!!

Congratulations to the @KeccakTeam

Here's a Rust library implementation of KangarooTwelve eXtendable Output Function (XOF) More @ github.com/itzmeanjan/kan… It supports both single and multi-threaded message absorption. Adding support for SIMD parallelism is something I'm working on 🛠️.

Sad about 12-round Keccak being rejected. "Announce primitive with lots of rounds, then cut the rounds after years of cryptanalysis shows it's safe" should be standard practice.

The program is now online. permutationbasedcrypto.org/2023/workshop

Here's a Rust library implementation of TurboSHAKE github.com/itzmeanjan/tur… ✨ TurboSHAKE is a family of extendable output functions (XOFs) based on 12 -rounds Keccak-p[1600] permutation, described on recently released paper ia.cr/2023/342 @KeccakTeam

XKCP: feedback and help wanted! github.com/XKCP/XKCP/disc…