NIST's draft SHA-3 revision: reviewing streaming support in cryptographic libraries
NIST has published a draft revision of its SHA-3 derived-functions guidance. Streaming input and output is the key change, giving relevant product teams a reason to review compatibility and validation plans.
Source summary
On October 8, 2026, NIST released a draft revision of SP 800-185, its guidance on SHA-3 derived functions. It introduces streaming interfaces for extendable-output functions (XOFs), allowing input and output to be processed incrementally without determining their total lengths in advance. Public comments are due December 7, 2026. This is a draft, not final revised guidance.
TABS Company's business perspective
Companies developing or procuring cryptographic libraries and security modules should first determine whether they use the relevant functionality. For affected products, review API compatibility, memory usage and test cases with suppliers, and assign responsibility for monitoring draft changes. Assess the impact in a validation environment rather than treating publication of the draft as an immediate obligation to replace production systems. This is TABS Company's analysis.
Source and reuse
Original title: SHA-3 Derived Functions: Draft Revision of SP 800-185 Available for Public Comment
Authoring institution: NIST CSRC | Publication date: 2026-10-08
Original: https://csrc.nist.gov/News/2026/draft-revision-of-sp-800-185-available-for-comment
Reuse basis: NIST public-information policy — https://www.nist.gov/copyrights-disclaimers
Item-level check: No separate copyright restriction or third-party authorship notice was identified on NIST's announcement. The linked draft PDF, code and charts were not reproduced.
AI-assisted summary and unofficial English translation. No NIST approval or endorsement is implied.
