It is surprisingly terrible. I haven't *actually* found the implementation of e.g. `SHA256_Final` yet :-/