S1 325 lib/sha256.c #define M(I) ( tm = S1(x[(I-2)&0x0f]) + x[(I-7)&0x0f] \ S1 352 lib/sha512.c u64plus (S1 (x[((I) - 2) & 15]), \