SS1               330 lib/sha256.c                                        t1 = H + SS1(E)  \
SS1               361 lib/sha512.c           u64plus (H, u64plus (SS1 (E),                                     \