Implement SHAKE in sha3.c#648

Merged

valeriosetti merged 14 commits intoMbed-TLS:developmentfrom

gilles-peskine-arm:sha3-shake-builtin

Jan 20, 2026

Commits on Jan 19, 2026

Distinguish between "some sha3.c" and "some SHA3 hash"
gilles-peskine-arm
committed
Temporarily declare built-in SHAKE in crypto_config.h
gilles-peskine-arm
committed
Adding SHA-3 SHAKE128 and SHA-3 SHAKE256.

polhenarejos
authored and
gilles-peskine-arm
committed
Allow multiple calls to mbedtls_sha3_finish()

polhenarejos
authored and
gilles-peskine-arm
committed
Don't free the context in finish() when doing SHAKE
gilles-peskine-arm
committed
Add self tests for SHAKE

polhenarejos
authored and
gilles-peskine-arm
committed
Don't try to build and run SHAKE self-test when SHAKE is disabled
gilles-peskine-arm
committed
Update sha3.h documentation for SHAKE
gilles-peskine-arm
committed
SHAKE128, SHAKE256: multi-part input and multi-output tests
gilles-peskine-arm
committed
Test SHA3/SHAKE with empty input, with or without an update() call
gilles-peskine-arm
committed
Add one-shot test cases for SHAKE128 and SHAKE256
gilles-peskine-arm
committed
Fix build failure with some SHAKE but no SHA3 hash
gilles-peskine-arm
committed
Explain why MBEDTLS_SHA3_WANT_SHAKEnnn ≠ MBEDTLS_PSA_BUILTIN_SHAKEnnn
gilles-peskine-arm
committed
Simplify context reuse protection in mbedtls_sha3_starts
gilles-peskine-arm
committed