You can do something similar with any cryptographic hash; just feed a (say) 128 bit counter through the hash function, and collect the outputs.

That's a great poin, even better.