SHA-3/512 generator
What SHA-3/512 is
The full-width SHA-3 option most comparable to SHA-512's output size—again via sponge construction, not SHA-512 rounds. Use it when your HSM or compliance checklist explicitly lists SHA3-512 alongside RSA or post-quantum pilots.
Performance note
Some ARM accelerators favor SHA-256/512 in hardware; SHA-3 may be software fallback—measure before assuming throughput gains.