CSHAKE256 implementation
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-185.pdf#3%20cSHAKE
Creates a new CSHAKE256 instance with a default output length of 64 bytes.
Creates a new CSHAKE256 instance with a non-default output length.