SHAKE128_DEFAULT_SIZE
#define SHAKE128_BLOCK_SIZE (200 - 2 * SHAKE128_DEFAULT_SIZE)
u8 out[8 + SHAKE128_DEFAULT_SIZE + 8];
u8 out[SHAKE128_DEFAULT_SIZE];
static const u8 test_shake128[8 + SHAKE128_DEFAULT_SIZE + 8] = {