[cm/hashed/] with SHAKE in [cm/hashed/Merkle]-tree mode.
cSHAKE with either "LEAF" or "NODE" personalisation strings are used
instead of "0x00"/"0x01" constants prepending to the hashed data.
"shake128-merkle", "shake256-merkle" algorithm identifiers are used.