Does it make sense to restrict the task to only Keccak now and make it more manageable for an applicant?
Sha256 seems done so no need to mix the two.
And is the pipelining stuff still needed? I don’y understand the requirement there actually because most (all?) Sha libraries can incrementally add message chunks before finalizing the digest at the end. What else is needed?