sigma0
s0 = X[(i+1)&0x0f]; s0 = sigma0(s0);
s0 = X[(i+1)&0x0f]; s0 = sigma0(s0); \
T = sigma0(F[8+16-1]);
s0 = X[(i+1)&0x0f]; s0 = sigma0(s0);
s0 = X[(j+1)&0x0f]; s0 = sigma0(s0); \