pub fn digest_bytes(domain: &str, bytes: &[u8]) -> String
Domain-separated SHA-256 digest encoded as sha256:<hex>.
sha256:<hex>