shake_xof
if (!shake_xof(ctx, key->shake256_md, in, in_len, key->tr, sizeof(key->tr)))
&& shake_xof(md_ctx, key->shake256_md,
if (!shake_xof(md_ctx, out->shake256_md, augmented_seed, sizeof(augmented_seed),
&& shake_xof(md_ctx, out->shake256_md, out->pub_encoding, out->params->pk_len,
if (!shake_xof(g_ctx, md, seed, seed_len, blocks, sizeof(blocks)))
if (!shake_xof(h_ctx, md, seed, seed_len, blocks, sizeof(blocks)))
return shake_xof(h_ctx, md, seed, seed_len, buf, buf_len)
if (!shake_xof(h_ctx, md, seed, seed_len, block, sizeof(block)))