C11-clean Keccak, SHA-3, and SHAKE implementation (targeting formal verification)