a = SHA_compress(null, first 64 bytes) b = SHA_compress(a, last 16 bytes + padding) c = SHA_compress(null, b)