sha256 IV should be unsigned chars.