BSD 2-clause -- same considerations as for sha256.c above