Consider following the Cryptographic Algorithm Validation Program

[dd86k]

The CAVP¹ would permit even more vigorous tests on the implementation.

The Secure Hash Algorithm-3 Validation System (SHA3VS)² includes tests for SHA-3 of short messages, long messages, and the pseudo-random monte carlo test and for SHA-3 XOFs (SHAKE) of short messages, long messages, the pseudo-random monte carlon test, and the variable-length output test.

Footnotes

1. https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program ↩

2. https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Secure-Hashing#sha3vsha3vss ↩