dsbyteKeccak: default: return errors.New("sha3: invalid hash state identifier") } rate := int(b[0]) b = b[1:] if rate != d.rate { return errors.New("sha3: invalid hash state function") } copy(d.a[:], b) b = b[len(d.a):] n, state := int(b[0]), spongeDirection(b[1]) if n > d.rate { return errors.New("sha3: invalid hash state") } d.n = n if state != spongeAbsorbing && state != spongeSqueezing { return errors.New("sha3: invalid hash state") } d.state = state return nil } golang.org/fips140@v1.0.0-c2097c7c/fip...

zetas[m] m-- t := f[start] f[start] = fieldAdd(t, f[start+2]) f[start+2] = fieldMontgomeryMulSu(zeta, f[start+2], t) t = f[start+1] f[start+1] = fieldAdd(t, f[start+3]) f[start+3] = fieldMontgomeryMulSu(zeta, f[start+3], t) } for start := 0; start < 256; start += 8 { zeta := zetas[m] m-- t := f[start] f[start] = fieldAdd(t, f[start+4]) f[start+4] = fieldMontgomeryMulSu(zeta, f[start+4], t) t = f[start+1] f[start+1] = fieldAdd(t, f[start+5]) f[start+5] = fieldMontgomeryMulSu(zeta, f[start+5], t) t = f[start+2]...