# zk_ignore
# Initial values, FIPS 180-3, section 5.3.3
# https://csrc.nist.gov/csrc/media/publications/fips/180/3/archive/2008-10-31/documents/fips180-3_final.pdf
: =
# A commitment scheme based on sha256 that takes one u32[16] array as input,
# and returns the sha256 compression over the randomness as a u32[8].
# Note: no padding is applied
: =
=
=
return