SHA512_H1
cpu_to_be64(SHA512_H0), cpu_to_be64(SHA512_H1),
cpu_to_be64(SHA512_H0), cpu_to_be64(SHA512_H1),
hilo(SHA512_H3), hilo(SHA512_H2), hilo(SHA512_H1), hilo(SHA512_H0) };
SHA512_H0, SHA512_H1, SHA512_H2, SHA512_H3,
sctx->state[1] = __cpu_to_be64(SHA512_H1);
SHA512_H0, SHA512_H1, SHA512_H2, SHA512_H3,