[zuzun]

The sponge design of SHA-3 makes it a CSPRNG basically. You can keep draining it after you fed the data in.

[tptacek]

You can do something similar with any cryptographic hash; just feed a (say) 128 bit counter through the hash function, and collect the outputs.

[glitchc]

That's a great poin, even better.