### Fixed
- Non-compliant initialization of cSHAKE when serialized length of
function name and
customization string is a multiple of the block size ([#836], backport
of [#834])

[#834]: https://github.com/RustCrypto/hashes/pull/834
[#836]: https://github.com/RustCrypto/hashes/pull/836