Cryptol specification of the Keccak (SHA-3) hash function