KangarooTwelve and TurboSHAKE
RFC 9861, “KangarooTwelve and TurboSHAKE”, is an Informational document published in October 2025 by B. Viguier, D. Wong, G. Van Assche, Q. Dang, J. Daemen. The canonical text is published by the RFC Editor.
Abstract
This document defines four eXtendable-Output Functions (XOFs), hash functions with output of arbitrary length, named TurboSHAKE128, TurboSHAKE256, KT128, and KT256.
All four functions provide efficient and secure hashing primitives, and the last two are able to exploit the parallelism of the implementation in a scalable way.
This document is a product of the Crypto Forum Research Group. It builds up on the definitions of the permutations and of the sponge construction in NIST FIPS 202 and is meant to serve as a stable reference and an implementation guide.
What “Informational” means
Published for the general information of the community. It does not define an IETF standard and carries no standards-track status.
The canonical text of RFC 9861 is hosted at rfc-editor.org. Available in HTML,TXT,PDF,XML.
- RFC 9860 Multicast-Only Fast Reroute Based on Topology Independent Loop-Free Alternate Fast Reroute
- RFC 9862 Path Computation Element Communication Protocol Extensions for Segment Routing Policy Candidate Paths
- RFC 9859 Generalized DNS Notifications
- RFC 9863 Path Computation Element Protocol Extension for Color
- RFC 9858 Additional Parameter Sets for HSS/LMS Hash-Based Signatures
- RFC 9864 Fully-Specified Algorithms for JSON Object Signing and Encryption and CBOR Object Signing and Encryption
- RFC 9857 Advertisement of Segment Routing Policies Using BGP - Link State
- RFC 9865 Cursor-Based Pagination of System of Cross-domain Identity Management Resources