888 #define f2(x,y,z)   (x ^ y ^ z)			/* Rounds 20-39: XOR */  macro
942 		TEMP = f2(B, C, D) + K2;  in SHATransform()
958 	TEMP = f2(B, C, D) + K2 + ROTL(5, A) + E + W[i];  in SHATransform()
978 	subRound( A, B, C, D, E, f2, K2, W[ i   ] );  in SHATransform()
979 	subRound( E, A, B, C, D, f2, K2, W[ i+1 ] );  in SHATransform()
980 	subRound( D, E, A, B, C, f2, K2, W[ i+2 ] );  in SHATransform()
981 	subRound( C, D, E, A, B, f2, K2, W[ i+3 ] );  in SHATransform()
982 	subRound( B, C, D, E, A, f2, K2, W[ i+4 ] );  in SHATransform()
1020     subRound( A, B, C, D, E, f2, K2, W[ 20 ] );  in SHATransform()
1021     subRound( E, A, B, C, D, f2, K2, W[ 21 ] );  in SHATransform()
1022     subRound( D, E, A, B, C, f2, K2, W[ 22 ] );  in SHATransform()
1023     subRound( C, D, E, A, B, f2, K2, W[ 23 ] );  in SHATransform()
1024     subRound( B, C, D, E, A, f2, K2, W[ 24 ] );  in SHATransform()
1025     subRound( A, B, C, D, E, f2, K2, W[ 25 ] );  in SHATransform()
1026     subRound( E, A, B, C, D, f2, K2, W[ 26 ] );  in SHATransform()
1027     subRound( D, E, A, B, C, f2, K2, W[ 27 ] );  in SHATransform()
1028     subRound( C, D, E, A, B, f2, K2, W[ 28 ] );  in SHATransform()
1029     subRound( B, C, D, E, A, f2, K2, W[ 29 ] );  in SHATransform()
1030     subRound( A, B, C, D, E, f2, K2, W[ 30 ] );  in SHATransform()
1031     subRound( E, A, B, C, D, f2, K2, W[ 31 ] );  in SHATransform()
1032     subRound( D, E, A, B, C, f2, K2, W[ 32 ] );  in SHATransform()
1033     subRound( C, D, E, A, B, f2, K2, W[ 33 ] );  in SHATransform()
1034     subRound( B, C, D, E, A, f2, K2, W[ 34 ] );  in SHATransform()
1035     subRound( A, B, C, D, E, f2, K2, W[ 35 ] );  in SHATransform()
1036     subRound( E, A, B, C, D, f2, K2, W[ 36 ] );  in SHATransform()
1037     subRound( D, E, A, B, C, f2, K2, W[ 37 ] );  in SHATransform()
1038     subRound( C, D, E, A, B, f2, K2, W[ 38 ] );  in SHATransform()
1039     subRound( B, C, D, E, A, f2, K2, W[ 39 ] );  in SHATransform()
1099 #undef f2