tree a6121508afa8b3fe006f926a60d63f670069e9b5
parent 11aff3705275ad9a48a62749789592f66a087aa1
author John McDole <john@mcdole.org> 1575459598 -0800
committer Lasse R.H. Nielsen <lrn@google.com> 1575459598 +0100

SHA 512/384 padding is 128 bit (#77)

The SHA algorithms were fine; but the padding in HashSink was hardcoded
to 64-bit signatures. While we still only generate a 64-bit signature,
the signature space is 128-bit.

Fixes #69.

Special thanks to @Nico04 for providing the test cases that lead to this
discovery.