crypto_rol_u64
t0 = bc[(i + 4) % 5] ^ crypto_rol_u64(bc[(i + 1) % 5], 1);
st[j] = crypto_rol_u64(t0, sha3_keccakf_rotc[i]);