S0                320 lib/sha256.c   #define S0(x) (rol(x,25)^rol(x,14)^(x>>3))
S0                345 lib/sha512.c   #define S0(x) u64xor (u64rol(x, 63), u64xor (u64rol (x, 56), u64shr (x, 7)))