3 ms·

Or use Keccak (which is the permutation that was chosen for SHA3), which lets you pick the length that you need.