---

cm/hashed with SHAKE in Merkle-tree mode ¶

cSHAKE with either "LEAF" or "NODE" personalisation strings are used instead of 0x00/0x01 constants prepending to the hashed data.

shake128-merkle, shake256-merkle algorithm identifiers are used.