SHAKE256_BLOCKSIZE
uint8_t blocks[SHAKE256_BLOCKSIZE], *b, *end = blocks + sizeof(blocks);
uint8_t block[SHAKE256_BLOCKSIZE];