It feels like you're just hunting for complexity a bit here. Any of SHA2, SHA3, or Blake are viable options. I'd only let NIST and FIPS drive my crypto choices

It feels like you're just hunting for complexity a bit here. Any of SHA2, SHA3, or Blake are viable options. I'd only let NIST and FIPS drive my crypto choices if I was being actively forced to do so by a government use case, and even so I'd be praying for the day that FIPS joins us in the modern era and stops tethering us to acronyms they could enumerate a decade ago.