Back to regulatory watch
NIST draft for commentGuidance and regulationPublished October 8, 2026

SP 800-185 Rev. 1, SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHashInitial Public Draft

Updated under an hour ago ()

Revision 1 introduces streaming interfaces for extendable-output function (XOF) computations, which allow applications to process input and request output incrementally without knowing the total input or output length in advance. From the Note to Reviewers (p. v): The Keccak-derived functions in this recommendation have been updated to describe a streaming mode of access that provides full XOF functionality. This involves calls to three functions: INIT, ABSORB, and SQUEEZE. Illustrative pseudocode is provided for the streaming interface, but the correct behavior of all streaming modes is defined in terms of the corresponding single-call interface to the functions. The single-call interfaces for these functions are equivalent to the functions defined in the previous version of this document. cSHAKE, KMAC, and ParallelHash use the ABSORB function to incrementally input data into the function so that ABSORB(𝑋1) followed by ABSORB(𝑋2) has the same effect as ABSORB(𝑋1 ∥ 𝑋2). TupleHash uses the absorb function somewhat differently in that each ABSORB call processes one complete tuple element. NIST invites comment on whether this different use of ABSORB might be confusing. The public…

Tags
NIST, draft open for comment, SP 800-185 REV. 1
Related exam domains
None matched
Source record id
https://csrc.nist.gov/pubs/sp/800/185/r1/ipd
First seen by InfoSec Signals
10/9/2026

Source: NIST CSRC drafts open for comment, National Institute of Standards and Technology, Computer Security Resource Center about this source more from it

Exam domain labels come from a keyword heuristic and are study hints, not an official mapping. The summary is the publisher's own text, shortened; the linked record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.