Skip to main content


Document Type Replaced Internet-Draft (cfrg RG)
Expired & archived
Author Benoît Viguier
Last updated 2019-03-13 (Latest revision 2019-02-07)
Replaced by draft-irtf-cfrg-kangarootwelve
RFC stream Internet Research Task Force (IRTF)
Intended RFC status (None)
Additional resources Mailing list discussion
Stream IRTF state Replaced
Consensus boilerplate Unknown
Document shepherd (None)
IESG IESG state Replaced by draft-irtf-cfrg-kangarootwelve
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:


This document defines the KangarooTwelve eXtendable Output Function (XOF), a hash function with output of arbitrary length. It provides an efficient and secure hashing primitive, which is able to exploit the parallelism of the implementation in a scalable way. It uses tree hashing over a round-reduced version of SHAKE128 as underlying primitive. This document builds up on the definitions of the permutations and of the sponge construction in [FIPS 202], and is meant to serve as a stable reference and an implementation guide.


Benoît Viguier

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)