33D7          ; mapped                 ; 0070 0068     # 1.1  SQUARE PH
33D8          ; disallowed                             # 1.1  SQUARE PM
33D9          ; mapped                 ; 0070 0070 006D #1.1  SQUARE PPM
33DA          ; mapped                 ; 0070 0072     # 1.1  SQUARE PR
33DB          ; mapped                 ; 0073 0072     # 1.1  SQUARE SR

of // the padding. Sections 6.1 and 6.2 of [1] separate the outputs of the // SHA-3 and SHAKE functions by appending bitstrings to the message. // Using a little-endian bit-ordering convention, these are "01" for SHA-3 // and "1111" for SHAKE, or 00000010b and 00001111b, respectively. Then the // padding rule from section 5.1 is applied to pad the message to a multiple // of the rate, which involves adding a "1" bit, zero or more "0" bits, and // a final "1" bit. We merge the first "1" bit from the...