Re:Maybe Skip SHA-3
by stouset on Thursday June 01, 2017 @01:13AM
(#14458149)
As tptacek points out elsewhere, if this is a concern for you, just use SHA-512/256. It's just as misuse-resistant, practically guaranteed to be in any library that would bother to implement SHA-3, faster by a mile, and has been the target of significantly more cryptanalysis.
There are zero practical reasons to choose SHA-3.