Daiki Ueno ueno@gnu.org writes:
Implement SHAKE128/256 functions
I've merged a stripped-down version of this patch, introducing a single new function sha3_256_shake. If I've understood it correctly, that's what is needed for ed448 signatures.
Regards, /Niels