Fixed carry propagation bug in P-256 'm62' implementation (found by Auke Zeilstra...
[BearSSL] / src / kdf / shake.c
2018-08-16 Thomas PorninAdded SHAKE implementation.