shake_final
shake_final(h, d, &C->C128, sha3_rate(128/8));
shake_final(h, d, &C->C256, sha3_rate(256/8));