SHA512_H3
cpu_to_be64(SHA512_H2), cpu_to_be64(SHA512_H3),
cpu_to_be64(SHA512_H2), cpu_to_be64(SHA512_H3),
hilo(SHA512_H3), hilo(SHA512_H2), hilo(SHA512_H1), hilo(SHA512_H0) };
SHA512_H0, SHA512_H1, SHA512_H2, SHA512_H3,
sctx->state[3] = __cpu_to_be64(SHA512_H3);
SHA512_H0, SHA512_H1, SHA512_H2, SHA512_H3,