_shake_finalize
ATTRIBUTE_WARN_UNUSED_RET int _shake_finalize(shake_context *ctx, u8 *output);
ret = _shake_finalize((shake_context *)ctx, output);