Hello, While we have gcry_md_hash_buffers in libgcrypt, and _gcry_md_hash_buffers_extract internally, we don't have the gcry_md_hash_buffers_extract function exposed. For an extendable output function like SHAKE, it is good to have gcry_md_hash_buffers_extract. Shall I do that for next libgcrypt release? --