RFC 9861
KangarooTwelve and TurboSHAKE, October 2025
- File formats:

- Also available: XML file for editing
- Status:
- INFORMATIONAL
- Authors:
- B. Viguier
D. Wong, Ed.
G. Van Assche, Ed.
Q. Dang, Ed.
J. Daemen, Ed. - Stream:
- IRTF
Cite this RFC: TXT | XML | BibTeX
DOI: https://doi.org/10.17487/RFC9861
Discuss this RFC: Send questions or comments to the mailing list cfrg@irtf.org
Other actions: Submit Errata | Find IPR Disclosures from the IETF | View History of RFC 9861
Abstract
This document defines four eXtendable-Output Functions (XOFs), hash functions with output of arbitrary length, named TurboSHAKE128, TurboSHAKE256, KT128, and KT256.
All four functions provide efficient and secure hashing primitives, and the last two are able to exploit the parallelism of the implementation in a scalable way.
This document is a product of the Crypto Forum Research Group. It builds up on the definitions of the permutations and of the sponge construction in NIST FIPS 202 and is meant to serve as a stable reference and an implementation guide.
For the definition of Status, see RFC 2026.
For the definition of Stream, see RFC 8729.