RE: Questions About the SHA-3 CRACEN Implementation

Kollin — Thu, 04 Jun 2026 13:23:33 GMT

Thanks for sending this, I'll take a look

RE: Questions About the SHA-3 CRACEN Implementation

Sigurd Hellesvik — Thu, 04 Jun 2026 08:10:52 GMT

[quote user=""]1. What exactly does the SHA-3 module of CRACEN actually do? Is it just a hardware implementation of Keccak-f, or does it also implement the sponge construction surrounding Keccak-f? If it's the latter, can we specify parameters like the rate/capacity and the output length, or are these hard-wired? I am trying to understand whether it would be feasible to create a custom driver for the SHAKE algorithms.[/quote]

Our official support for CRACEN usage is via the PSA Crypto API. And as you can see under Supported Hash algorithms, we only support SHAKE256 512 bits. As you can see, Oberon software crypto drivers support other algorithms, so this is likely the easiest path for thetting SHAKE.

If you this want to have a look at our docs and source code yourself, here are available resources: CRACEN chapter in nRF54L15 datasheet, and CRACEN drivers. And for SHA3, see specicifally drivers/cracen/sxsymcrypt/src/sha3.c.

[quote user=""]2. Are there any plans to update the nRF Connect SDK to support variable-length CRACEN-accelerated SHAKE128 and SHAKE256 in the near future?[/quote]

No, we do not have plans for this in the near future.

RE: Questions About the SHA-3 CRACEN Implementation

Sigurd Hellesvik — Wed, 03 Jun 2026 11:31:22 GMT

Hi,

I will have a look

Regards,
Sigurd Hellesvik