SHAKE-128/256 XOF | Dyber IP Cores

Overview

Keccak sponge with arbitrary-length output.

FIPS 202 extendable-output function built on the Keccak sponge construction. Absorbs arbitrary-length input, pads, and squeezes arbitrary-length output. Used extensively in PQC for key derivation, sampling, and mask generation.

Key Features

What the core provides.

SHAKE-128 and SHAKE-256
Absorb/pad/squeeze sponge construction
Arbitrary output length for key derivation and sampling

Benefits

Why it matters.

Critical building block for ML-KEM, ML-DSA, and SLH-DSA sampling and key derivation
Arbitrary output length enables flexible protocol design

Standards & Verification

Compliance and test status.

Standards: NIST FIPS 202

Verification: Verified vs hashlib at both levels + SHAKE256("") KAT.

Note: "Verified" means RTL byte-exact against official test vectors. It does not imply FIPS 140-3 certification or foundry sign-off.

Availability & Deliverables

Available as verified soft IP.

Available Verified soft IP, ready for integration and licensing.

RTL

Synthesizable SystemVerilog RTL

Foundry-portable design targeting any process node. Technology-independent by default.

Verification

Self-Checking Testbench(es)

Automated pass/fail testbenches that verify RTL output byte-exact against golden reference vectors.

Golden Model

Python Golden Reference Model

Independent software oracle for comparison and integration testing.

Regression

cocotb Regression

Full cocotb-based test infrastructure for rapid integration into customer verification flows.

Synthesis

Synthesis Scripts

Ready-to-run scripts for technology-independent synthesis with constraint templates.

Documentation

Integration / User Guide

Complete interface specification, timing diagrams, and design-in guidance for SoC assembly.

Firm/hard IP (hardened netlist for a target node) available on foundry enablement.

SHAKE-128/256 XOF.