"single block" test was actually generating 2048 bytes (oops)
and streaming bytes without an input buffer, and ending on a partial buffer, was xoring against the leftover buffer, but that buffer wasn't being zero'd. luckily it's not a high use case..