7 ms·

The sponge design of SHA-3 makes it a CSPRNG basically. You can keep draining it after you fed the data in.

• glitchc 3y ago
  That's a great poin, even better.
• tptacek 3y ago
  You can do something similar with any cryptographic hash; just feed a (say) 128 bit counter through the hash function, and collect the outputs.