SS0               329 lib/sha256.c   #define R(A,B,C,D,E,F,G,H,K,M)  do { t0 = SS0(A) + F2(A,B,C); \
SS0               359 lib/sha512.c         u64 t0 = u64plus (SS0 (A), F2 (A, B, C));                           \