Do hash functions such as SHA-2 and SHA-3 output random numbers, and are they therefore good P/RNGs? How do I implement a hash function that maps a multiplicative group element G to an element of Z_p? Can SHA-256 do that?