Hash function variant that can produce arbitrary length output, e.g., SHAKE128/256; useful in ZK systems and key derivation for flexible digest sizes.