initialized // by newCShake function and stores concatenation of N followed by S, encoded // by the method specified in 3.3 of [1]. // It is stored here in order for Reset() to be able to put context into // initial state. initBlock []byte } func bytepadWrite(c *SHAKE, data []byte, rate int) { rateEnc := leftEncode(uint64(rate)) c.Write(rateEnc) c.Write(data) if padlen := rate - (len(rateEnc)+len(data))%rate; padlen < rate { const maxRate = rateK256 c.Write(make([]byte, padlen, maxRate)) // explicit...