write b2B and B2b; test out composition = id (works on examples); haven't actually done proof. sha_h now? or sha_splitandpad_equiv?