Keccak

Pure Scala implementation of Keccak-256 and SHA3-256 hash functions.

Implementation follows NIST FIPS 202 and is cross-checked with BouncyCastle.

The Keccak-f[1600] permutation operates on a 1600-bit state (25 × 64-bit lanes). For 256-bit output with capacity 512, the rate is 1088 bits (136 bytes).

The only difference between Keccak-256 and SHA3-256 is the domain separation suffix:

• Keccak-256: suffix 0x01
• SHA3-256: suffix 0x06