On the convergence of the SHAKE algorithm