SHAKE256 equivalent if N and S is empty "".
Keccak512(bytepad(encode_string(N)||encode_string(S), 136)||X||00, d) = cSHAKE128(encode_string(N)||encode_string(S), 136)||X||00, d)
The byte rate of the Hash Function.