🔒Keccak

NEW

A family of sponge-based cryptographic functions that underpin the NIST SHA-3 hash and SHAKE extendable-output standards.

DESCRIPTION

Keccak is a sponge construction designed by Bertoni, Daemen, Peeters, and Van Assche. It forms the basis of the SHA-3 hash family and SHAKE XOFs standardized by NIST. Unlike Merkle–Damgård designs, Keccak absorbs and squeezes data through permutations and XOR operations. Its design emphasizes resistance to known hash attacks and flexibility in output length. Keccak enables robust hashing, message authentication, and pseudorandom generation. It is widely used in modern cryptographic applications and standards.

ALTERNATIVE DEFINITIONS

Keccak Team

Keccak is a family of sponge functions that can be used to build hash functions and other cryptographic primitives.

Highlights sponge construction and versatility for cryptographic primitives.

Source

NIST

This standard specifies the SHA-3 family of hash functions and the SHAKE extendable-output functions, which are based on the Keccak algorithm.

Official U.S. standard confirming SHA-3/SHAKE are Keccak-based.

Source

IACR ePrint

We present Keccak, a family of sponge functions with variable output length built from a simple permutation and designed for hashing and related applications.

Academic description emphasizing permutation-based sponge design.

Source

RELATED TERMS

SHA-3 Sponge Construction SHAKE128 SHAKE256 Cryptographic Hash Function Extendable-Output Function Merkle–Damgård

COMPETING TERMS

SHA-2 BLAKE3

KNOWLEDGE AREAS

Data Security Software Engineering Infrastructure

TARGET AUDIENCE

Cybersecurity Engineer Security Architect Chief Information Security Officer Software Developer DevOps Engineer

EXTERNAL SOURCES

• Wikipedia - Keccak
• NIST - SHA-3 and SHAKE standard
• Keccak Team - Official Keccak description
• IACR - Keccak sponge paper

TOP QUESTIONS

What distinguishes Keccak from Merkle–Damgård hash designs?

Keccak uses a sponge construction with absorption and squeezing, offering flexibility and strong security properties compared to iterative compression approaches.

Category: Opinion

Why is Keccak relevant today?

It underpins SHA-3 and SHAKE standards, providing modern, secure hashing and extendable outputs for diverse cryptographic applications.

Category: Relevancy

Where is Keccak commonly used?

In hashing, message authentication, and pseudorandom generation, including standardized SHA-3 and SHAKE functions.

Category: Applications

What risks arise from improper Keccak implementation?

Incorrect padding or parameterization can weaken security. Reliance on unverified libraries may introduce vulnerabilities.

Category: Risks

How does Keccak achieve extendable outputs?

By ‘squeezing’ the sponge state to produce variable-length output, enabling SHAKE functions.

Category: Example

What are common mistakes with Keccak in production?

Misusing non-standard variants, poor performance tuning, and inadequate testing across platforms.

Category: Mistakes

How should Keccak be managed in secure systems?

Use standardized parameters (SHA-3/SHAKE), vetted libraries, hardware acceleration where available, and rigorous test suites.

Category: Management

What are competing hash functions to Keccak?

SHA-2 remains widely deployed; BLAKE3 offers speed and modern design trade-offs.

Category: Alternatives

Where can developers learn about Keccak?

Consult NIST FIPS 202, the Keccak Team site, and IACR papers for theory and implementation guidance.

Category: Learning