From: Ardis Lu <ardisglu@gmail.com>
Date: Wed, 15 Mar 2023 04:57:56 +0000 (-0700)
Subject: Update keccak256 implementation from Deno to noble
X-Git-Url: https://git.ardis.lu/?a=commitdiff_plain;h=881715e03bc6953757f09630f4ef1ab6aaaad777;p=ens2hex

Update keccak256 implementation from Deno to noble
---

diff --git a/README.md b/README.md
index c2538a5..9511a75 100644
--- a/README.md
+++ b/README.md
@@ -2,4 +2,4 @@
 
 Minimal website to look up the Ethereum hexadecimal (`0x`) address for every [ENS](https://ens.domains/) (`.eth`) name in a list.
 
-The keccak256 algorithm is from [Deno](https://deno.land/)'s `std/hash` library, slightly modified to be used in the web browser.
+The keccak256 algorithm is from Paul Miller's [noble-hashes](https://github.com/paulmillr/noble-hashes) library.
diff --git a/index.html b/index.html
index 2ac5ff5..4629db2 100644
--- a/index.html
+++ b/index.html
@@ -234,7 +234,7 @@
         <div class="details-body">
           <p>This tool uses <a href="https://developers.cloudflare.com/web3/">Cloudflare's Ethereum gateway</a> to query the ENS smart contract on the Ethereum blockchain. <a href="https://ethereumnodes.com/">Click here</a> or <a href="https://chainlist.org/chain/1">here</a> to see a list of some other public nodes you could use.</p>
           <p>In the JavaScript, the only third-party code is the <code>keccak256</code> implementation used to hash the ENS names. The rest of the tool consists of about 80 lines of vanilla JavaScript to manipulate the names and prepare the JSON-RPC payload.</p>
-          <p>The <code>keccak256</code> implementation was adapted from Deno (original code <a href="https://github.com/denoland/deno_std/tree/main/hash">here</a>).</p>
+          <p>The <code>keccak256</code> implementation was bundled from Paul Miller's <a href="https://github.com/paulmillr/noble-hashes">noble-hashes</a> project.</p>
           <p><a href="https://github.com/ardislu/ens2hex">Click here</a> to view this site's source code on GitHub.</p>
         </div>
       </details>
@@ -279,13 +279,8 @@
   </main>
 
   <script type="module">
-    import { Keccak256 } from './keccak256.js'; // Converted to JS from Deno's std/hash library
-
-    function keccak256(byteArray) {
-      const k = new Keccak256();
-      k.update(byteArray);
-      return k.digest();
-    }
+    // @noble/hashes v1.2.0
+    import { keccak_256 as keccak256 } from '/keccak256.js';
 
     // Implement drag and drop file upload
     window.addEventListener('dragover', e => e.preventDefault());
diff --git a/keccak256.js b/keccak256.js
index dc04097..e5dfbff 100644
--- a/keccak256.js
+++ b/keccak256.js
@@ -1,881 +1,6 @@
-// https://github.com/denoland/deno_std/blob/main/hash/_sha3/keccakf.ts
-const KECCAK_ROUNDS = 24;
-const KECCAK_RC = [
-  0x1,
-  0x0,
-  0x8082,
-  0x0,
-  0x808a,
-  0x80000000,
-  0x80008000,
-  0x80000000,
-  0x808b,
-  0x0,
-  0x80000001,
-  0x0,
-  0x80008081,
-  0x80000000,
-  0x8009,
-  0x80000000,
-  0x8a,
-  0x0,
-  0x88,
-  0x0,
-  0x80008009,
-  0x0,
-  0x8000000a,
-  0x0,
-  0x8000808b,
-  0x0,
-  0x8b,
-  0x80000000,
-  0x8089,
-  0x80000000,
-  0x8003,
-  0x80000000,
-  0x8002,
-  0x80000000,
-  0x80,
-  0x80000000,
-  0x800a,
-  0x0,
-  0x8000000a,
-  0x80000000,
-  0x80008081,
-  0x80000000,
-  0x8080,
-  0x80000000,
-  0x80000001,
-  0x0,
-  0x80008008,
-  0x80000000,
-];
+function k(t){if(!Number.isSafeInteger(t)||t<0)throw new Error(`Wrong positive integer: ${t}`)}function v(t){if(typeof t!="boolean")throw new Error(`Expected boolean, not ${t}`)}function A(t,...e){if(!(t instanceof Uint8Array))throw new TypeError("Expected Uint8Array");if(e.length>0&&!e.includes(t.length))throw new TypeError(`Expected Uint8Array of length ${e}, not of length=${t.length}`)}function $(t){if(typeof t!="function"||typeof t.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");k(t.outputLen),k(t.blockLen)}function F(t,e=!0){if(t.destroyed)throw new Error("Hash instance has been destroyed");if(e&&t.finished)throw new Error("Hash#digest() has already been called")}function X(t,e){A(t);let n=e.outputLen;if(t.length<n)throw new Error(`digestInto() expects output buffer of length at least ${n}`)}var M={number:k,bool:v,bytes:A,hash:$,exists:F,output:X},p=M;var w=BigInt(4294967295),L=BigInt(32);function m(t,e=!1){return e?{h:Number(t&w),l:Number(t>>L&w)}:{h:Number(t>>L&w)|0,l:Number(t&w)|0}}function P(t,e=!1){let n=new Uint32Array(t.length),o=new Uint32Array(t.length);for(let r=0;r<t.length;r++){let{h:i,l:s}=m(t[r],e);[n[r],o[r]]=[i,s]}return[n,o]}var C=(t,e)=>BigInt(t>>>0)<<L|BigInt(e>>>0),D=(t,e,n)=>t>>>n,R=(t,e,n)=>t<<32-n|e>>>n,V=(t,e,n)=>t>>>n|e<<32-n,W=(t,e,n)=>t<<32-n|e>>>n,q=(t,e,n)=>t<<64-n|e>>>n-32,z=(t,e,n)=>t>>>n-32|e<<64-n,G=(t,e)=>e,J=(t,e)=>t,Q=(t,e,n)=>t<<n|e>>>32-n,Y=(t,e,n)=>e<<n|t>>>32-n,Z=(t,e,n)=>e<<n-32|t>>>64-n,K=(t,e,n)=>t<<n-32|e>>>64-n;function tt(t,e,n,o){let r=(e>>>0)+(o>>>0);return{h:t+n+(r/2**32|0)|0,l:r|0}}var et=(t,e,n)=>(t>>>0)+(e>>>0)+(n>>>0),nt=(t,e,n,o)=>e+n+o+(t/2**32|0)|0,ot=(t,e,n,o)=>(t>>>0)+(e>>>0)+(n>>>0)+(o>>>0),rt=(t,e,n,o,r)=>e+n+o+r+(t/2**32|0)|0,st=(t,e,n,o,r)=>(t>>>0)+(e>>>0)+(n>>>0)+(o>>>0)+(r>>>0),it=(t,e,n,o,r,i)=>e+n+o+r+i+(t/2**32|0)|0,ct={fromBig:m,split:P,toBig:C,shrSH:D,shrSL:R,rotrSH:V,rotrSL:W,rotrBH:q,rotrBL:z,rotr32H:G,rotr32L:J,rotlSH:Q,rotlSL:Y,rotlBH:Z,rotlBL:K,add:tt,add3L:et,add3H:nt,add4L:ot,add4H:rt,add5H:it,add5L:st},h=ct;var ft={node:void 0,web:typeof self=="object"&&"crypto"in self?self.crypto:void 0};var B=t=>new Uint32Array(t.buffer,t.byteOffset,Math.floor(t.byteLength/4));var ut=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!ut)throw new Error("Non little-endian hardware is not supported");var Bt=Array.from({length:256},(t,e)=>e.toString(16).padStart(2,"0"));function pt(t){if(typeof t!="string")throw new TypeError(`utf8ToBytes expected string, got ${typeof t}`);return new TextEncoder().encode(t)}function b(t){if(typeof t=="string"&&(t=pt(t)),!(t instanceof Uint8Array))throw new TypeError(`Expected input type is Uint8Array (got ${typeof t})`);return t}var g=class{clone(){return this._cloneInto()}};function O(t){let e=o=>t().update(b(o)).digest(),n=t();return e.outputLen=n.outputLen,e.blockLen=n.blockLen,e.create=()=>t(),e}function I(t){let e=(o,r)=>t(r).update(b(o)).digest(),n=t({});return e.outputLen=n.outputLen,e.blockLen=n.blockLen,e.create=o=>t(o),e}var[U,H,T]=[[],[],[]],ht=BigInt(0),a=BigInt(1),lt=BigInt(2),at=BigInt(7),dt=BigInt(256),xt=BigInt(113);for(let t=0,e=a,n=1,o=0;t<24;t++){[n,o]=[o,(2*n+3*o)%5],U.push(2*(5*o+n)),H.push((t+1)*(t+2)/2%64);let r=ht;for(let i=0;i<7;i++)e=(e<<a^(e>>at)*xt)%dt,e&lt&&(r^=a<<(a<<BigInt(i))-a);T.push(r)}var[yt,wt]=h.split(T,!0),E=(t,e,n)=>n>32?h.rotlBH(t,e,n):h.rotlSH(t,e,n),_=(t,e,n)=>n>32?h.rotlBL(t,e,n):h.rotlSL(t,e,n);function gt(t,e=24){let n=new Uint32Array(10);for(let o=24-e;o<24;o++){for(let s=0;s<10;s++)n[s]=t[s]^t[s+10]^t[s+20]^t[s+30]^t[s+40];for(let s=0;s<10;s+=2){let c=(s+8)%10,d=(s+2)%10,x=n[d],u=n[d+1],j=E(x,u,1)^n[c],N=_(x,u,1)^n[c+1];for(let y=0;y<50;y+=10)t[s+y]^=j,t[s+y+1]^=N}let r=t[2],i=t[3];for(let s=0;s<24;s++){let c=H[s],d=E(r,i,c),x=_(r,i,c),u=U[s];r=t[u],i=t[u+1],t[u]=d,t[u+1]=x}for(let s=0;s<50;s+=10){for(let c=0;c<10;c++)n[c]=t[s+c];for(let c=0;c<10;c++)t[s+c]^=~n[(c+2)%10]&n[(c+4)%10]}t[0]^=yt[o],t[1]^=wt[o]}n.fill(0)}var l=class extends g{constructor(e,n,o,r=!1,i=24){if(super(),this.blockLen=e,this.suffix=n,this.outputLen=o,this.enableXOF=r,this.rounds=i,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,p.number(o),0>=this.blockLen||this.blockLen>=200)throw new Error("Sha3 supports only keccak-f1600 function");this.state=new Uint8Array(200),this.state32=B(this.state)}keccak(){gt(this.state32,this.rounds),this.posOut=0,this.pos=0}update(e){p.exists(this);let{blockLen:n,state:o}=this;e=b(e);let r=e.length;for(let i=0;i<r;){let s=Math.min(n-this.pos,r-i);for(let c=0;c<s;c++)o[this.pos++]^=e[i++];this.pos===n&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:e,suffix:n,pos:o,blockLen:r}=this;e[o]^=n,n&128&&o===r-1&&this.keccak(),e[r-1]^=128,this.keccak()}writeInto(e){p.exists(this,!1),p.bytes(e),this.finish();let n=this.state,{blockLen:o}=this;for(let r=0,i=e.length;r<i;){this.posOut>=o&&this.keccak();let s=Math.min(o-this.posOut,i-r);e.set(n.subarray(this.posOut,this.posOut+s),r),this.posOut+=s,r+=s}return e}xofInto(e){if(!this.enableXOF)throw new Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return p.number(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(p.output(e,this),this.finished)throw new Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){let{blockLen:n,suffix:o,outputLen:r,rounds:i,enableXOF:s}=this;return e||(e=new l(n,o,r,s,i)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=i,e.suffix=o,e.outputLen=r,e.enableXOF=s,e.destroyed=this.destroyed,e}},f=(t,e,n)=>O(()=>new l(e,t,n)),Ut=f(6,144,224/8),Ht=f(6,136,256/8),Tt=f(6,104,384/8),St=f(6,72,512/8),jt=f(1,144,224/8),bt=f(1,136,256/8),Nt=f(1,104,384/8),vt=f(1,72,512/8),S=(t,e,n)=>I((o={})=>new l(e,t,o.dkLen===void 0?n:o.dkLen,!0)),$t=S(31,168,128/8),Ft=S(31,136,256/8);export{bt as keccak_256};
+/*! Bundled license information:
 
-function keccakf(state) {
-  const s = new Uint32Array(state.buffer);
-  let bc0 = 0;
-  let bc1 = 0;
-  let bc2 = 0;
-  let bc3 = 0;
-  let bc4 = 0;
-  let bc5 = 0;
-  let bc6 = 0;
-  let bc7 = 0;
-  let bc8 = 0;
-  let bc9 = 0;
-  let d0 = 0;
-  let d1 = 0;
-  let d2 = 0;
-  let d3 = 0;
-  let d4 = 0;
-  let d5 = 0;
-  let d6 = 0;
-  let d7 = 0;
-  let d8 = 0;
-  let d9 = 0;
-  let t0 = 0;
-  let t1 = 0;
-
-  for (let n = 0; n < KECCAK_ROUNDS * 2; n += 8) {
-    // Round 1
-    bc0 = s[0] ^ s[10] ^ s[20] ^ s[30] ^ s[40];
-    bc1 = s[1] ^ s[11] ^ s[21] ^ s[31] ^ s[41];
-    bc2 = s[2] ^ s[12] ^ s[22] ^ s[32] ^ s[42];
-    bc3 = s[3] ^ s[13] ^ s[23] ^ s[33] ^ s[43];
-    bc4 = s[4] ^ s[14] ^ s[24] ^ s[34] ^ s[44];
-    bc5 = s[5] ^ s[15] ^ s[25] ^ s[35] ^ s[45];
-    bc6 = s[6] ^ s[16] ^ s[26] ^ s[36] ^ s[46];
-    bc7 = s[7] ^ s[17] ^ s[27] ^ s[37] ^ s[47];
-    bc8 = s[8] ^ s[18] ^ s[28] ^ s[38] ^ s[48];
-    bc9 = s[9] ^ s[19] ^ s[29] ^ s[39] ^ s[49];
-
-    d0 = bc8 ^ ((bc2 << 1) | (bc3 >>> 31));
-    d1 = bc9 ^ ((bc3 << 1) | (bc2 >>> 31));
-    d2 = bc0 ^ ((bc4 << 1) | (bc5 >>> 31));
-    d3 = bc1 ^ ((bc5 << 1) | (bc4 >>> 31));
-    d4 = bc2 ^ ((bc6 << 1) | (bc7 >>> 31));
-    d5 = bc3 ^ ((bc7 << 1) | (bc6 >>> 31));
-    d6 = bc4 ^ ((bc8 << 1) | (bc9 >>> 31));
-    d7 = bc5 ^ ((bc9 << 1) | (bc8 >>> 31));
-    d8 = bc6 ^ ((bc0 << 1) | (bc1 >>> 31));
-    d9 = bc7 ^ ((bc1 << 1) | (bc0 >>> 31));
-
-    bc0 = s[0] ^ d0;
-    bc1 = s[1] ^ d1;
-    t0 = s[12] ^ d2;
-    t1 = s[13] ^ d3;
-    bc2 = (t1 << 12) | (t0 >>> 20);
-    bc3 = (t0 << 12) | (t1 >>> 20);
-    t0 = s[24] ^ d4;
-    t1 = s[25] ^ d5;
-    bc4 = (t1 << 11) | (t0 >>> 21);
-    bc5 = (t0 << 11) | (t1 >>> 21);
-    t0 = s[36] ^ d6;
-    t1 = s[37] ^ d7;
-    bc6 = (t0 << 21) | (t1 >>> 11);
-    bc7 = (t1 << 21) | (t0 >>> 11);
-    t0 = s[48] ^ d8;
-    t1 = s[49] ^ d9;
-    bc8 = (t0 << 14) | (t1 >>> 18);
-    bc9 = (t1 << 14) | (t0 >>> 18);
-    s[0] = bc0 ^ (bc4 & ~bc2) ^ KECCAK_RC[n];
-    s[1] = bc1 ^ (bc5 & ~bc3) ^ KECCAK_RC[n + 1];
-    s[12] = bc2 ^ (bc6 & ~bc4);
-    s[13] = bc3 ^ (bc7 & ~bc5);
-    s[24] = bc4 ^ (bc8 & ~bc6);
-    s[25] = bc5 ^ (bc9 & ~bc7);
-    s[36] = bc6 ^ (bc0 & ~bc8);
-    s[37] = bc7 ^ (bc1 & ~bc9);
-    s[48] = bc8 ^ (bc2 & ~bc0);
-    s[49] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[20] ^ d0;
-    t1 = s[21] ^ d1;
-    bc4 = (t0 << 3) | (t1 >>> 29);
-    bc5 = (t1 << 3) | (t0 >>> 29);
-    t0 = s[32] ^ d2;
-    t1 = s[33] ^ d3;
-    bc6 = (t1 << 13) | (t0 >>> 19);
-    bc7 = (t0 << 13) | (t1 >>> 19);
-    t0 = s[44] ^ d4;
-    t1 = s[45] ^ d5;
-    bc8 = (t1 << 29) | (t0 >>> 3);
-    bc9 = (t0 << 29) | (t1 >>> 3);
-    t0 = s[6] ^ d6;
-    t1 = s[7] ^ d7;
-    bc0 = (t0 << 28) | (t1 >>> 4);
-    bc1 = (t1 << 28) | (t0 >>> 4);
-    t0 = s[18] ^ d8;
-    t1 = s[19] ^ d9;
-    bc2 = (t0 << 20) | (t1 >>> 12);
-    bc3 = (t1 << 20) | (t0 >>> 12);
-    s[20] = bc0 ^ (bc4 & ~bc2);
-    s[21] = bc1 ^ (bc5 & ~bc3);
-    s[32] = bc2 ^ (bc6 & ~bc4);
-    s[33] = bc3 ^ (bc7 & ~bc5);
-    s[44] = bc4 ^ (bc8 & ~bc6);
-    s[45] = bc5 ^ (bc9 & ~bc7);
-    s[6] = bc6 ^ (bc0 & ~bc8);
-    s[7] = bc7 ^ (bc1 & ~bc9);
-    s[18] = bc8 ^ (bc2 & ~bc0);
-    s[19] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[40] ^ d0;
-    t1 = s[41] ^ d1;
-    bc8 = (t0 << 18) | (t1 >>> 14);
-    bc9 = (t1 << 18) | (t0 >>> 14);
-    t0 = s[2] ^ d2;
-    t1 = s[3] ^ d3;
-    bc0 = (t0 << 1) | (t1 >>> 31);
-    bc1 = (t1 << 1) | (t0 >>> 31);
-    t0 = s[14] ^ d4;
-    t1 = s[15] ^ d5;
-    bc2 = (t0 << 6) | (t1 >>> 26);
-    bc3 = (t1 << 6) | (t0 >>> 26);
-    t0 = s[26] ^ d6;
-    t1 = s[27] ^ d7;
-    bc4 = (t0 << 25) | (t1 >>> 7);
-    bc5 = (t1 << 25) | (t0 >>> 7);
-    t0 = s[38] ^ d8;
-    t1 = s[39] ^ d9;
-    bc6 = (t0 << 8) | (t1 >>> 24);
-    bc7 = (t1 << 8) | (t0 >>> 24);
-    s[40] = bc0 ^ (bc4 & ~bc2);
-    s[41] = bc1 ^ (bc5 & ~bc3);
-    s[2] = bc2 ^ (bc6 & ~bc4);
-    s[3] = bc3 ^ (bc7 & ~bc5);
-    s[14] = bc4 ^ (bc8 & ~bc6);
-    s[15] = bc5 ^ (bc9 & ~bc7);
-    s[26] = bc6 ^ (bc0 & ~bc8);
-    s[27] = bc7 ^ (bc1 & ~bc9);
-    s[38] = bc8 ^ (bc2 & ~bc0);
-    s[39] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[10] ^ d0;
-    t1 = s[11] ^ d1;
-    bc2 = (t1 << 4) | (t0 >>> 28);
-    bc3 = (t0 << 4) | (t1 >>> 28);
-    t0 = s[22] ^ d2;
-    t1 = s[23] ^ d3;
-    bc4 = (t0 << 10) | (t1 >>> 22);
-    bc5 = (t1 << 10) | (t0 >>> 22);
-    t0 = s[34] ^ d4;
-    t1 = s[35] ^ d5;
-    bc6 = (t0 << 15) | (t1 >>> 17);
-    bc7 = (t1 << 15) | (t0 >>> 17);
-    t0 = s[46] ^ d6;
-    t1 = s[47] ^ d7;
-    bc8 = (t1 << 24) | (t0 >>> 8);
-    bc9 = (t0 << 24) | (t1 >>> 8);
-    t0 = s[8] ^ d8;
-    t1 = s[9] ^ d9;
-    bc0 = (t0 << 27) | (t1 >>> 5);
-    bc1 = (t1 << 27) | (t0 >>> 5);
-    s[10] = bc0 ^ (bc4 & ~bc2);
-    s[11] = bc1 ^ (bc5 & ~bc3);
-    s[22] = bc2 ^ (bc6 & ~bc4);
-    s[23] = bc3 ^ (bc7 & ~bc5);
-    s[34] = bc4 ^ (bc8 & ~bc6);
-    s[35] = bc5 ^ (bc9 & ~bc7);
-    s[46] = bc6 ^ (bc0 & ~bc8);
-    s[47] = bc7 ^ (bc1 & ~bc9);
-    s[8] = bc8 ^ (bc2 & ~bc0);
-    s[9] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[30] ^ d0;
-    t1 = s[31] ^ d1;
-    bc6 = (t1 << 9) | (t0 >>> 23);
-    bc7 = (t0 << 9) | (t1 >>> 23);
-    t0 = s[42] ^ d2;
-    t1 = s[43] ^ d3;
-    bc8 = (t0 << 2) | (t1 >>> 30);
-    bc9 = (t1 << 2) | (t0 >>> 30);
-    t0 = s[4] ^ d4;
-    t1 = s[5] ^ d5;
-    bc0 = (t1 << 30) | (t0 >>> 2);
-    bc1 = (t0 << 30) | (t1 >>> 2);
-    t0 = s[16] ^ d6;
-    t1 = s[17] ^ d7;
-    bc2 = (t1 << 23) | (t0 >>> 9);
-    bc3 = (t0 << 23) | (t1 >>> 9);
-    t0 = s[28] ^ d8;
-    t1 = s[29] ^ d9;
-    bc4 = (t1 << 7) | (t0 >>> 25);
-    bc5 = (t0 << 7) | (t1 >>> 25);
-    s[30] = bc0 ^ (bc4 & ~bc2);
-    s[31] = bc1 ^ (bc5 & ~bc3);
-    s[42] = bc2 ^ (bc6 & ~bc4);
-    s[43] = bc3 ^ (bc7 & ~bc5);
-    s[4] = bc4 ^ (bc8 & ~bc6);
-    s[5] = bc5 ^ (bc9 & ~bc7);
-    s[16] = bc6 ^ (bc0 & ~bc8);
-    s[17] = bc7 ^ (bc1 & ~bc9);
-    s[28] = bc8 ^ (bc2 & ~bc0);
-    s[29] = bc9 ^ (bc3 & ~bc1);
-
-    // Round 2
-    bc0 = s[0] ^ s[10] ^ s[20] ^ s[30] ^ s[40];
-    bc1 = s[1] ^ s[11] ^ s[21] ^ s[31] ^ s[41];
-    bc2 = s[2] ^ s[12] ^ s[22] ^ s[32] ^ s[42];
-    bc3 = s[3] ^ s[13] ^ s[23] ^ s[33] ^ s[43];
-    bc4 = s[4] ^ s[14] ^ s[24] ^ s[34] ^ s[44];
-    bc5 = s[5] ^ s[15] ^ s[25] ^ s[35] ^ s[45];
-    bc6 = s[6] ^ s[16] ^ s[26] ^ s[36] ^ s[46];
-    bc7 = s[7] ^ s[17] ^ s[27] ^ s[37] ^ s[47];
-    bc8 = s[8] ^ s[18] ^ s[28] ^ s[38] ^ s[48];
-    bc9 = s[9] ^ s[19] ^ s[29] ^ s[39] ^ s[49];
-
-    d0 = bc8 ^ ((bc2 << 1) | (bc3 >>> 31));
-    d1 = bc9 ^ ((bc3 << 1) | (bc2 >>> 31));
-    d2 = bc0 ^ ((bc4 << 1) | (bc5 >>> 31));
-    d3 = bc1 ^ ((bc5 << 1) | (bc4 >>> 31));
-    d4 = bc2 ^ ((bc6 << 1) | (bc7 >>> 31));
-    d5 = bc3 ^ ((bc7 << 1) | (bc6 >>> 31));
-    d6 = bc4 ^ ((bc8 << 1) | (bc9 >>> 31));
-    d7 = bc5 ^ ((bc9 << 1) | (bc8 >>> 31));
-    d8 = bc6 ^ ((bc0 << 1) | (bc1 >>> 31));
-    d9 = bc7 ^ ((bc1 << 1) | (bc0 >>> 31));
-
-    bc0 = s[0] ^ d0;
-    bc1 = s[1] ^ d1;
-    t0 = s[32] ^ d2;
-    t1 = s[33] ^ d3;
-    bc2 = (t1 << 12) | (t0 >>> 20);
-    bc3 = (t0 << 12) | (t1 >>> 20);
-    t0 = s[14] ^ d4;
-    t1 = s[15] ^ d5;
-    bc4 = (t1 << 11) | (t0 >>> 21);
-    bc5 = (t0 << 11) | (t1 >>> 21);
-    t0 = s[46] ^ d6;
-    t1 = s[47] ^ d7;
-    bc6 = (t0 << 21) | (t1 >>> 11);
-    bc7 = (t1 << 21) | (t0 >>> 11);
-    t0 = s[28] ^ d8;
-    t1 = s[29] ^ d9;
-    bc8 = (t0 << 14) | (t1 >>> 18);
-    bc9 = (t1 << 14) | (t0 >>> 18);
-    s[0] = bc0 ^ (bc4 & ~bc2) ^ KECCAK_RC[n + 2];
-    s[1] = bc1 ^ (bc5 & ~bc3) ^ KECCAK_RC[n + 3];
-    s[32] = bc2 ^ (bc6 & ~bc4);
-    s[33] = bc3 ^ (bc7 & ~bc5);
-    s[14] = bc4 ^ (bc8 & ~bc6);
-    s[15] = bc5 ^ (bc9 & ~bc7);
-    s[46] = bc6 ^ (bc0 & ~bc8);
-    s[47] = bc7 ^ (bc1 & ~bc9);
-    s[28] = bc8 ^ (bc2 & ~bc0);
-    s[29] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[40] ^ d0;
-    t1 = s[41] ^ d1;
-    bc4 = (t0 << 3) | (t1 >>> 29);
-    bc5 = (t1 << 3) | (t0 >>> 29);
-    t0 = s[22] ^ d2;
-    t1 = s[23] ^ d3;
-    bc6 = (t1 << 13) | (t0 >>> 19);
-    bc7 = (t0 << 13) | (t1 >>> 19);
-    t0 = s[4] ^ d4;
-    t1 = s[5] ^ d5;
-    bc8 = (t1 << 29) | (t0 >>> 3);
-    bc9 = (t0 << 29) | (t1 >>> 3);
-    t0 = s[36] ^ d6;
-    t1 = s[37] ^ d7;
-    bc0 = (t0 << 28) | (t1 >>> 4);
-    bc1 = (t1 << 28) | (t0 >>> 4);
-    t0 = s[18] ^ d8;
-    t1 = s[19] ^ d9;
-    bc2 = (t0 << 20) | (t1 >>> 12);
-    bc3 = (t1 << 20) | (t0 >>> 12);
-    s[40] = bc0 ^ (bc4 & ~bc2);
-    s[41] = bc1 ^ (bc5 & ~bc3);
-    s[22] = bc2 ^ (bc6 & ~bc4);
-    s[23] = bc3 ^ (bc7 & ~bc5);
-    s[4] = bc4 ^ (bc8 & ~bc6);
-    s[5] = bc5 ^ (bc9 & ~bc7);
-    s[36] = bc6 ^ (bc0 & ~bc8);
-    s[37] = bc7 ^ (bc1 & ~bc9);
-    s[18] = bc8 ^ (bc2 & ~bc0);
-    s[19] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[30] ^ d0;
-    t1 = s[31] ^ d1;
-    bc8 = (t0 << 18) | (t1 >>> 14);
-    bc9 = (t1 << 18) | (t0 >>> 14);
-    t0 = s[12] ^ d2;
-    t1 = s[13] ^ d3;
-    bc0 = (t0 << 1) | (t1 >>> 31);
-    bc1 = (t1 << 1) | (t0 >>> 31);
-    t0 = s[44] ^ d4;
-    t1 = s[45] ^ d5;
-    bc2 = (t0 << 6) | (t1 >>> 26);
-    bc3 = (t1 << 6) | (t0 >>> 26);
-    t0 = s[26] ^ d6;
-    t1 = s[27] ^ d7;
-    bc4 = (t0 << 25) | (t1 >>> 7);
-    bc5 = (t1 << 25) | (t0 >>> 7);
-    t0 = s[8] ^ d8;
-    t1 = s[9] ^ d9;
-    bc6 = (t0 << 8) | (t1 >>> 24);
-    bc7 = (t1 << 8) | (t0 >>> 24);
-    s[30] = bc0 ^ (bc4 & ~bc2);
-    s[31] = bc1 ^ (bc5 & ~bc3);
-    s[12] = bc2 ^ (bc6 & ~bc4);
-    s[13] = bc3 ^ (bc7 & ~bc5);
-    s[44] = bc4 ^ (bc8 & ~bc6);
-    s[45] = bc5 ^ (bc9 & ~bc7);
-    s[26] = bc6 ^ (bc0 & ~bc8);
-    s[27] = bc7 ^ (bc1 & ~bc9);
-    s[8] = bc8 ^ (bc2 & ~bc0);
-    s[9] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[20] ^ d0;
-    t1 = s[21] ^ d1;
-    bc2 = (t1 << 4) | (t0 >>> 28);
-    bc3 = (t0 << 4) | (t1 >>> 28);
-    t0 = s[2] ^ d2;
-    t1 = s[3] ^ d3;
-    bc4 = (t0 << 10) | (t1 >>> 22);
-    bc5 = (t1 << 10) | (t0 >>> 22);
-    t0 = s[34] ^ d4;
-    t1 = s[35] ^ d5;
-    bc6 = (t0 << 15) | (t1 >>> 17);
-    bc7 = (t1 << 15) | (t0 >>> 17);
-    t0 = s[16] ^ d6;
-    t1 = s[17] ^ d7;
-    bc8 = (t1 << 24) | (t0 >>> 8);
-    bc9 = (t0 << 24) | (t1 >>> 8);
-    t0 = s[48] ^ d8;
-    t1 = s[49] ^ d9;
-    bc0 = (t0 << 27) | (t1 >>> 5);
-    bc1 = (t1 << 27) | (t0 >>> 5);
-    s[20] = bc0 ^ (bc4 & ~bc2);
-    s[21] = bc1 ^ (bc5 & ~bc3);
-    s[2] = bc2 ^ (bc6 & ~bc4);
-    s[3] = bc3 ^ (bc7 & ~bc5);
-    s[34] = bc4 ^ (bc8 & ~bc6);
-    s[35] = bc5 ^ (bc9 & ~bc7);
-    s[16] = bc6 ^ (bc0 & ~bc8);
-    s[17] = bc7 ^ (bc1 & ~bc9);
-    s[48] = bc8 ^ (bc2 & ~bc0);
-    s[49] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[10] ^ d0;
-    t1 = s[11] ^ d1;
-    bc6 = (t1 << 9) | (t0 >>> 23);
-    bc7 = (t0 << 9) | (t1 >>> 23);
-    t0 = s[42] ^ d2;
-    t1 = s[43] ^ d3;
-    bc8 = (t0 << 2) | (t1 >>> 30);
-    bc9 = (t1 << 2) | (t0 >>> 30);
-    t0 = s[24] ^ d4;
-    t1 = s[25] ^ d5;
-    bc0 = (t1 << 30) | (t0 >>> 2);
-    bc1 = (t0 << 30) | (t1 >>> 2);
-    t0 = s[6] ^ d6;
-    t1 = s[7] ^ d7;
-    bc2 = (t1 << 23) | (t0 >>> 9);
-    bc3 = (t0 << 23) | (t1 >>> 9);
-    t0 = s[38] ^ d8;
-    t1 = s[39] ^ d9;
-    bc4 = (t1 << 7) | (t0 >>> 25);
-    bc5 = (t0 << 7) | (t1 >>> 25);
-    s[10] = bc0 ^ (bc4 & ~bc2);
-    s[11] = bc1 ^ (bc5 & ~bc3);
-    s[42] = bc2 ^ (bc6 & ~bc4);
-    s[43] = bc3 ^ (bc7 & ~bc5);
-    s[24] = bc4 ^ (bc8 & ~bc6);
-    s[25] = bc5 ^ (bc9 & ~bc7);
-    s[6] = bc6 ^ (bc0 & ~bc8);
-    s[7] = bc7 ^ (bc1 & ~bc9);
-    s[38] = bc8 ^ (bc2 & ~bc0);
-    s[39] = bc9 ^ (bc3 & ~bc1);
-
-    // Round 3
-    bc0 = s[0] ^ s[10] ^ s[20] ^ s[30] ^ s[40];
-    bc1 = s[1] ^ s[11] ^ s[21] ^ s[31] ^ s[41];
-    bc2 = s[2] ^ s[12] ^ s[22] ^ s[32] ^ s[42];
-    bc3 = s[3] ^ s[13] ^ s[23] ^ s[33] ^ s[43];
-    bc4 = s[4] ^ s[14] ^ s[24] ^ s[34] ^ s[44];
-    bc5 = s[5] ^ s[15] ^ s[25] ^ s[35] ^ s[45];
-    bc6 = s[6] ^ s[16] ^ s[26] ^ s[36] ^ s[46];
-    bc7 = s[7] ^ s[17] ^ s[27] ^ s[37] ^ s[47];
-    bc8 = s[8] ^ s[18] ^ s[28] ^ s[38] ^ s[48];
-    bc9 = s[9] ^ s[19] ^ s[29] ^ s[39] ^ s[49];
-
-    d0 = bc8 ^ ((bc2 << 1) | (bc3 >>> 31));
-    d1 = bc9 ^ ((bc3 << 1) | (bc2 >>> 31));
-    d2 = bc0 ^ ((bc4 << 1) | (bc5 >>> 31));
-    d3 = bc1 ^ ((bc5 << 1) | (bc4 >>> 31));
-    d4 = bc2 ^ ((bc6 << 1) | (bc7 >>> 31));
-    d5 = bc3 ^ ((bc7 << 1) | (bc6 >>> 31));
-    d6 = bc4 ^ ((bc8 << 1) | (bc9 >>> 31));
-    d7 = bc5 ^ ((bc9 << 1) | (bc8 >>> 31));
-    d8 = bc6 ^ ((bc0 << 1) | (bc1 >>> 31));
-    d9 = bc7 ^ ((bc1 << 1) | (bc0 >>> 31));
-
-    bc0 = s[0] ^ d0;
-    bc1 = s[1] ^ d1;
-    t0 = s[22] ^ d2;
-    t1 = s[23] ^ d3;
-    bc2 = (t1 << 12) | (t0 >>> 20);
-    bc3 = (t0 << 12) | (t1 >>> 20);
-    t0 = s[44] ^ d4;
-    t1 = s[45] ^ d5;
-    bc4 = (t1 << 11) | (t0 >>> 21);
-    bc5 = (t0 << 11) | (t1 >>> 21);
-    t0 = s[16] ^ d6;
-    t1 = s[17] ^ d7;
-    bc6 = (t0 << 21) | (t1 >>> 11);
-    bc7 = (t1 << 21) | (t0 >>> 11);
-    t0 = s[38] ^ d8;
-    t1 = s[39] ^ d9;
-    bc8 = (t0 << 14) | (t1 >>> 18);
-    bc9 = (t1 << 14) | (t0 >>> 18);
-    s[0] = bc0 ^ (bc4 & ~bc2) ^ KECCAK_RC[n + 4];
-    s[1] = bc1 ^ (bc5 & ~bc3) ^ KECCAK_RC[n + 5];
-    s[22] = bc2 ^ (bc6 & ~bc4);
-    s[23] = bc3 ^ (bc7 & ~bc5);
-    s[44] = bc4 ^ (bc8 & ~bc6);
-    s[45] = bc5 ^ (bc9 & ~bc7);
-    s[16] = bc6 ^ (bc0 & ~bc8);
-    s[17] = bc7 ^ (bc1 & ~bc9);
-    s[38] = bc8 ^ (bc2 & ~bc0);
-    s[39] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[30] ^ d0;
-    t1 = s[31] ^ d1;
-    bc4 = (t0 << 3) | (t1 >>> 29);
-    bc5 = (t1 << 3) | (t0 >>> 29);
-    t0 = s[2] ^ d2;
-    t1 = s[3] ^ d3;
-    bc6 = (t1 << 13) | (t0 >>> 19);
-    bc7 = (t0 << 13) | (t1 >>> 19);
-    t0 = s[24] ^ d4;
-    t1 = s[25] ^ d5;
-    bc8 = (t1 << 29) | (t0 >>> 3);
-    bc9 = (t0 << 29) | (t1 >>> 3);
-    t0 = s[46] ^ d6;
-    t1 = s[47] ^ d7;
-    bc0 = (t0 << 28) | (t1 >>> 4);
-    bc1 = (t1 << 28) | (t0 >>> 4);
-    t0 = s[18] ^ d8;
-    t1 = s[19] ^ d9;
-    bc2 = (t0 << 20) | (t1 >>> 12);
-    bc3 = (t1 << 20) | (t0 >>> 12);
-    s[30] = bc0 ^ (bc4 & ~bc2);
-    s[31] = bc1 ^ (bc5 & ~bc3);
-    s[2] = bc2 ^ (bc6 & ~bc4);
-    s[3] = bc3 ^ (bc7 & ~bc5);
-    s[24] = bc4 ^ (bc8 & ~bc6);
-    s[25] = bc5 ^ (bc9 & ~bc7);
-    s[46] = bc6 ^ (bc0 & ~bc8);
-    s[47] = bc7 ^ (bc1 & ~bc9);
-    s[18] = bc8 ^ (bc2 & ~bc0);
-    s[19] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[10] ^ d0;
-    t1 = s[11] ^ d1;
-    bc8 = (t0 << 18) | (t1 >>> 14);
-    bc9 = (t1 << 18) | (t0 >>> 14);
-    t0 = s[32] ^ d2;
-    t1 = s[33] ^ d3;
-    bc0 = (t0 << 1) | (t1 >>> 31);
-    bc1 = (t1 << 1) | (t0 >>> 31);
-    t0 = s[4] ^ d4;
-    t1 = s[5] ^ d5;
-    bc2 = (t0 << 6) | (t1 >>> 26);
-    bc3 = (t1 << 6) | (t0 >>> 26);
-    t0 = s[26] ^ d6;
-    t1 = s[27] ^ d7;
-    bc4 = (t0 << 25) | (t1 >>> 7);
-    bc5 = (t1 << 25) | (t0 >>> 7);
-    t0 = s[48] ^ d8;
-    t1 = s[49] ^ d9;
-    bc6 = (t0 << 8) | (t1 >>> 24);
-    bc7 = (t1 << 8) | (t0 >>> 24);
-    s[10] = bc0 ^ (bc4 & ~bc2);
-    s[11] = bc1 ^ (bc5 & ~bc3);
-    s[32] = bc2 ^ (bc6 & ~bc4);
-    s[33] = bc3 ^ (bc7 & ~bc5);
-    s[4] = bc4 ^ (bc8 & ~bc6);
-    s[5] = bc5 ^ (bc9 & ~bc7);
-    s[26] = bc6 ^ (bc0 & ~bc8);
-    s[27] = bc7 ^ (bc1 & ~bc9);
-    s[48] = bc8 ^ (bc2 & ~bc0);
-    s[49] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[40] ^ d0;
-    t1 = s[41] ^ d1;
-    bc2 = (t1 << 4) | (t0 >>> 28);
-    bc3 = (t0 << 4) | (t1 >>> 28);
-    t0 = s[12] ^ d2;
-    t1 = s[13] ^ d3;
-    bc4 = (t0 << 10) | (t1 >>> 22);
-    bc5 = (t1 << 10) | (t0 >>> 22);
-    t0 = s[34] ^ d4;
-    t1 = s[35] ^ d5;
-    bc6 = (t0 << 15) | (t1 >>> 17);
-    bc7 = (t1 << 15) | (t0 >>> 17);
-    t0 = s[6] ^ d6;
-    t1 = s[7] ^ d7;
-    bc8 = (t1 << 24) | (t0 >>> 8);
-    bc9 = (t0 << 24) | (t1 >>> 8);
-    t0 = s[28] ^ d8;
-    t1 = s[29] ^ d9;
-    bc0 = (t0 << 27) | (t1 >>> 5);
-    bc1 = (t1 << 27) | (t0 >>> 5);
-    s[40] = bc0 ^ (bc4 & ~bc2);
-    s[41] = bc1 ^ (bc5 & ~bc3);
-    s[12] = bc2 ^ (bc6 & ~bc4);
-    s[13] = bc3 ^ (bc7 & ~bc5);
-    s[34] = bc4 ^ (bc8 & ~bc6);
-    s[35] = bc5 ^ (bc9 & ~bc7);
-    s[6] = bc6 ^ (bc0 & ~bc8);
-    s[7] = bc7 ^ (bc1 & ~bc9);
-    s[28] = bc8 ^ (bc2 & ~bc0);
-    s[29] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[20] ^ d0;
-    t1 = s[21] ^ d1;
-    bc6 = (t1 << 9) | (t0 >>> 23);
-    bc7 = (t0 << 9) | (t1 >>> 23);
-    t0 = s[42] ^ d2;
-    t1 = s[43] ^ d3;
-    bc8 = (t0 << 2) | (t1 >>> 30);
-    bc9 = (t1 << 2) | (t0 >>> 30);
-    t0 = s[14] ^ d4;
-    t1 = s[15] ^ d5;
-    bc0 = (t1 << 30) | (t0 >>> 2);
-    bc1 = (t0 << 30) | (t1 >>> 2);
-    t0 = s[36] ^ d6;
-    t1 = s[37] ^ d7;
-    bc2 = (t1 << 23) | (t0 >>> 9);
-    bc3 = (t0 << 23) | (t1 >>> 9);
-    t0 = s[8] ^ d8;
-    t1 = s[9] ^ d9;
-    bc4 = (t1 << 7) | (t0 >>> 25);
-    bc5 = (t0 << 7) | (t1 >>> 25);
-    s[20] = bc0 ^ (bc4 & ~bc2);
-    s[21] = bc1 ^ (bc5 & ~bc3);
-    s[42] = bc2 ^ (bc6 & ~bc4);
-    s[43] = bc3 ^ (bc7 & ~bc5);
-    s[14] = bc4 ^ (bc8 & ~bc6);
-    s[15] = bc5 ^ (bc9 & ~bc7);
-    s[36] = bc6 ^ (bc0 & ~bc8);
-    s[37] = bc7 ^ (bc1 & ~bc9);
-    s[8] = bc8 ^ (bc2 & ~bc0);
-    s[9] = bc9 ^ (bc3 & ~bc1);
-
-    // Round 4
-    bc0 = s[0] ^ s[10] ^ s[20] ^ s[30] ^ s[40];
-    bc1 = s[1] ^ s[11] ^ s[21] ^ s[31] ^ s[41];
-    bc2 = s[2] ^ s[12] ^ s[22] ^ s[32] ^ s[42];
-    bc3 = s[3] ^ s[13] ^ s[23] ^ s[33] ^ s[43];
-    bc4 = s[4] ^ s[14] ^ s[24] ^ s[34] ^ s[44];
-    bc5 = s[5] ^ s[15] ^ s[25] ^ s[35] ^ s[45];
-    bc6 = s[6] ^ s[16] ^ s[26] ^ s[36] ^ s[46];
-    bc7 = s[7] ^ s[17] ^ s[27] ^ s[37] ^ s[47];
-    bc8 = s[8] ^ s[18] ^ s[28] ^ s[38] ^ s[48];
-    bc9 = s[9] ^ s[19] ^ s[29] ^ s[39] ^ s[49];
-
-    d0 = bc8 ^ ((bc2 << 1) | (bc3 >>> 31));
-    d1 = bc9 ^ ((bc3 << 1) | (bc2 >>> 31));
-    d2 = bc0 ^ ((bc4 << 1) | (bc5 >>> 31));
-    d3 = bc1 ^ ((bc5 << 1) | (bc4 >>> 31));
-    d4 = bc2 ^ ((bc6 << 1) | (bc7 >>> 31));
-    d5 = bc3 ^ ((bc7 << 1) | (bc6 >>> 31));
-    d6 = bc4 ^ ((bc8 << 1) | (bc9 >>> 31));
-    d7 = bc5 ^ ((bc9 << 1) | (bc8 >>> 31));
-    d8 = bc6 ^ ((bc0 << 1) | (bc1 >>> 31));
-    d9 = bc7 ^ ((bc1 << 1) | (bc0 >>> 31));
-
-    bc0 = s[0] ^ d0;
-    bc1 = s[1] ^ d1;
-    t0 = s[2] ^ d2;
-    t1 = s[3] ^ d3;
-    bc2 = (t1 << 12) | (t0 >>> 20);
-    bc3 = (t0 << 12) | (t1 >>> 20);
-    t0 = s[4] ^ d4;
-    t1 = s[5] ^ d5;
-    bc4 = (t1 << 11) | (t0 >>> 21);
-    bc5 = (t0 << 11) | (t1 >>> 21);
-    t0 = s[6] ^ d6;
-    t1 = s[7] ^ d7;
-    bc6 = (t0 << 21) | (t1 >>> 11);
-    bc7 = (t1 << 21) | (t0 >>> 11);
-    t0 = s[8] ^ d8;
-    t1 = s[9] ^ d9;
-    bc8 = (t0 << 14) | (t1 >>> 18);
-    bc9 = (t1 << 14) | (t0 >>> 18);
-    s[0] = bc0 ^ (bc4 & ~bc2) ^ KECCAK_RC[n + 6];
-    s[1] = bc1 ^ (bc5 & ~bc3) ^ KECCAK_RC[n + 7];
-    s[2] = bc2 ^ (bc6 & ~bc4);
-    s[3] = bc3 ^ (bc7 & ~bc5);
-    s[4] = bc4 ^ (bc8 & ~bc6);
-    s[5] = bc5 ^ (bc9 & ~bc7);
-    s[6] = bc6 ^ (bc0 & ~bc8);
-    s[7] = bc7 ^ (bc1 & ~bc9);
-    s[8] = bc8 ^ (bc2 & ~bc0);
-    s[9] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[10] ^ d0;
-    t1 = s[11] ^ d1;
-    bc4 = (t0 << 3) | (t1 >>> 29);
-    bc5 = (t1 << 3) | (t0 >>> 29);
-    t0 = s[12] ^ d2;
-    t1 = s[13] ^ d3;
-    bc6 = (t1 << 13) | (t0 >>> 19);
-    bc7 = (t0 << 13) | (t1 >>> 19);
-    t0 = s[14] ^ d4;
-    t1 = s[15] ^ d5;
-    bc8 = (t1 << 29) | (t0 >>> 3);
-    bc9 = (t0 << 29) | (t1 >>> 3);
-    t0 = s[16] ^ d6;
-    t1 = s[17] ^ d7;
-    bc0 = (t0 << 28) | (t1 >>> 4);
-    bc1 = (t1 << 28) | (t0 >>> 4);
-    t0 = s[18] ^ d8;
-    t1 = s[19] ^ d9;
-    bc2 = (t0 << 20) | (t1 >>> 12);
-    bc3 = (t1 << 20) | (t0 >>> 12);
-    s[10] = bc0 ^ (bc4 & ~bc2);
-    s[11] = bc1 ^ (bc5 & ~bc3);
-    s[12] = bc2 ^ (bc6 & ~bc4);
-    s[13] = bc3 ^ (bc7 & ~bc5);
-    s[14] = bc4 ^ (bc8 & ~bc6);
-    s[15] = bc5 ^ (bc9 & ~bc7);
-    s[16] = bc6 ^ (bc0 & ~bc8);
-    s[17] = bc7 ^ (bc1 & ~bc9);
-    s[18] = bc8 ^ (bc2 & ~bc0);
-    s[19] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[20] ^ d0;
-    t1 = s[21] ^ d1;
-    bc8 = (t0 << 18) | (t1 >>> 14);
-    bc9 = (t1 << 18) | (t0 >>> 14);
-    t0 = s[22] ^ d2;
-    t1 = s[23] ^ d3;
-    bc0 = (t0 << 1) | (t1 >>> 31);
-    bc1 = (t1 << 1) | (t0 >>> 31);
-    t0 = s[24] ^ d4;
-    t1 = s[25] ^ d5;
-    bc2 = (t0 << 6) | (t1 >>> 26);
-    bc3 = (t1 << 6) | (t0 >>> 26);
-    t0 = s[26] ^ d6;
-    t1 = s[27] ^ d7;
-    bc4 = (t0 << 25) | (t1 >>> 7);
-    bc5 = (t1 << 25) | (t0 >>> 7);
-    t0 = s[28] ^ d8;
-    t1 = s[29] ^ d9;
-    bc6 = (t0 << 8) | (t1 >>> 24);
-    bc7 = (t1 << 8) | (t0 >>> 24);
-    s[20] = bc0 ^ (bc4 & ~bc2);
-    s[21] = bc1 ^ (bc5 & ~bc3);
-    s[22] = bc2 ^ (bc6 & ~bc4);
-    s[23] = bc3 ^ (bc7 & ~bc5);
-    s[24] = bc4 ^ (bc8 & ~bc6);
-    s[25] = bc5 ^ (bc9 & ~bc7);
-    s[26] = bc6 ^ (bc0 & ~bc8);
-    s[27] = bc7 ^ (bc1 & ~bc9);
-    s[28] = bc8 ^ (bc2 & ~bc0);
-    s[29] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[30] ^ d0;
-    t1 = s[31] ^ d1;
-    bc2 = (t1 << 4) | (t0 >>> 28);
-    bc3 = (t0 << 4) | (t1 >>> 28);
-    t0 = s[32] ^ d2;
-    t1 = s[33] ^ d3;
-    bc4 = (t0 << 10) | (t1 >>> 22);
-    bc5 = (t1 << 10) | (t0 >>> 22);
-    t0 = s[34] ^ d4;
-    t1 = s[35] ^ d5;
-    bc6 = (t0 << 15) | (t1 >>> 17);
-    bc7 = (t1 << 15) | (t0 >>> 17);
-    t0 = s[36] ^ d6;
-    t1 = s[37] ^ d7;
-    bc8 = (t1 << 24) | (t0 >>> 8);
-    bc9 = (t0 << 24) | (t1 >>> 8);
-    t0 = s[38] ^ d8;
-    t1 = s[39] ^ d9;
-    bc0 = (t0 << 27) | (t1 >>> 5);
-    bc1 = (t1 << 27) | (t0 >>> 5);
-    s[30] = bc0 ^ (bc4 & ~bc2);
-    s[31] = bc1 ^ (bc5 & ~bc3);
-    s[32] = bc2 ^ (bc6 & ~bc4);
-    s[33] = bc3 ^ (bc7 & ~bc5);
-    s[34] = bc4 ^ (bc8 & ~bc6);
-    s[35] = bc5 ^ (bc9 & ~bc7);
-    s[36] = bc6 ^ (bc0 & ~bc8);
-    s[37] = bc7 ^ (bc1 & ~bc9);
-    s[38] = bc8 ^ (bc2 & ~bc0);
-    s[39] = bc9 ^ (bc3 & ~bc1);
-
-    t0 = s[40] ^ d0;
-    t1 = s[41] ^ d1;
-    bc6 = (t1 << 9) | (t0 >>> 23);
-    bc7 = (t0 << 9) | (t1 >>> 23);
-    t0 = s[42] ^ d2;
-    t1 = s[43] ^ d3;
-    bc8 = (t0 << 2) | (t1 >>> 30);
-    bc9 = (t1 << 2) | (t0 >>> 30);
-    t0 = s[44] ^ d4;
-    t1 = s[45] ^ d5;
-    bc0 = (t1 << 30) | (t0 >>> 2);
-    bc1 = (t0 << 30) | (t1 >>> 2);
-    t0 = s[46] ^ d6;
-    t1 = s[47] ^ d7;
-    bc2 = (t1 << 23) | (t0 >>> 9);
-    bc3 = (t0 << 23) | (t1 >>> 9);
-    t0 = s[48] ^ d8;
-    t1 = s[49] ^ d9;
-    bc4 = (t1 << 7) | (t0 >>> 25);
-    bc5 = (t0 << 7) | (t1 >>> 25);
-    s[40] = bc0 ^ (bc4 & ~bc2);
-    s[41] = bc1 ^ (bc5 & ~bc3);
-    s[42] = bc2 ^ (bc6 & ~bc4);
-    s[43] = bc3 ^ (bc7 & ~bc5);
-    s[44] = bc4 ^ (bc8 & ~bc6);
-    s[45] = bc5 ^ (bc9 & ~bc7);
-    s[46] = bc6 ^ (bc0 & ~bc8);
-    s[47] = bc7 ^ (bc1 & ~bc9);
-    s[48] = bc8 ^ (bc2 & ~bc0);
-    s[49] = bc9 ^ (bc3 & ~bc1);
-  }
-}
-
-// https://github.com/denoland/deno_std/blob/main/hash/_sha3/sponge.ts
-const STATE_SIZE = 200;
-const TYPE_ERROR_MSG = "sha3: `data` is invalid type";
-
-class Sponge {
-  #option;
-  #state;
-  #rp;
-  #absorbing;
-
-  constructor(option) {
-    this.#option = option;
-    this.#state = new Uint8Array(STATE_SIZE);
-    this.#rp = 0;
-    this.#absorbing = true;
-  }
-
-  /** Applies padding to internal state */
-  pad() {
-    this.#state[this.#rp] ^= this.#option.dsbyte;
-    this.#state[this.#option.rate - 1] ^= 0x80;
-  }
-
-  /** Squeezes internal state */
-  squeeze(length) {
-    if (length < 0) {
-      throw new Error("sha3: length cannot be negative");
-    }
-
-    this.pad();
-
-    const hash = new Uint8Array(length);
-    let pos = 0;
-    while (length > 0) {
-      const r = length > this.#option.rate ? this.#option.rate : length;
-      this.#option.permutator(this.#state);
-      hash.set(this.#state.slice(0, r), pos);
-      length -= r;
-      pos += r;
-    }
-
-    this.#absorbing = false;
-    return hash;
-  }
-
-  /** Updates internal state by absorbing */
-  update(data) {
-    if (!this.#absorbing) {
-      throw new Error("sha3: cannot update already finalized hash");
-    }
-
-    let msg;
-
-    if (typeof data === "string") {
-      msg = new TextEncoder().encode(data);
-    } else if (typeof data === "object") {
-      if (data instanceof ArrayBuffer || ArrayBuffer.isView(data)) {
-        msg = new Uint8Array(data);
-      } else {
-        throw new Error(TYPE_ERROR_MSG);
-      }
-    } else {
-      throw new Error(TYPE_ERROR_MSG);
-    }
-
-    let rp = this.#rp;
-
-    for (let i = 0; i < msg.length; ++i) {
-      this.#state[rp++] ^= msg[i];
-      if (rp >= this.#option.rate) {
-        this.#option.permutator(this.#state);
-        rp = 0;
-      }
-    }
-
-    this.#rp = rp;
-    return this;
-  }
-
-  /** Returns the hash in ArrayBuffer */
-  digest() {
-    return this.squeeze(this.#option.bitsize >> 3);
-  }
-}
-
-// https://github.com/denoland/deno_std/blob/main/hash/_sha3/keccak.ts
-export class Keccak256 extends Sponge {
-  constructor() {
-    super({
-      bitsize: 256,
-      rate: 136,
-      dsbyte: 1,
-      permutator: keccakf,
-    });
-  }
-}
+@noble/hashes/esm/utils.js:
+  (*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) *)
+*/