SHS_DIGESTSIZE
SHS_DIGESTSIZE,
if (output->length != SHS_DIGESTSIZE) {
output->length, SHS_DIGESTSIZE);