pub fn digest(preimage: &[u8; 32]) -> [u8; 32]
H = SHA-256(X): what the policy carries and the plate shows. Public.