rust-crypto for SHA256, normalise tree after pop()