Stack optimized Keccak permutation

[mkannwischer]

The current KeccakF1600_StatePermute uses 2984 bytes of stack memory which is quite excessive.
We probably want to replace that with an in-place variant from https://github.com/XKCP/XKCP/tree/master/lib/low/KeccakP-1600/plain-32bits-inplace.