!!! Overview
[{$pagename}] ([XOF]) are [Cryptographic Hash Function] which can output an arbitrarily large number of random-looking [bits].


Where most [Cryptographic Hash Functions] are fixed length.


!! Questions on Possible Uses
[FIPS 202] Appendix A.2:\\
''"it is possible to use an XOF as a hash function by selecting a fixed output length. However, XOFs have the potential for generating related outputs—a property that designers of security applications/protocols/systems may not expect of hash functions"''

\\ and later:\\
"''For example, a naïve (and non-approved) way for two parties to agree to derive a 112-bit Triple DES key from a message designated as keymaterial would be to compute SHAKE128(keymaterial, keylength), where keylength is 112. However, if an attacker is able to induce one of the parties to use a different value for keylength, say 168 bits, but the same value for keymaterial''"

!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]