100   sha->Nh = 0;  in SHA384_Init()
118   sha->Nh = 0;  in SHA512_Init()
177     c->Nh++;  in SHA512_Update()
180     c->Nh += (((uint64_t)len) >> 61);  in SHA512_Update()
247   p[sizeof(sha->u) - 9] = (uint8_t)(sha->Nh);  in SHA512_Final()
248   p[sizeof(sha->u) - 10] = (uint8_t)(sha->Nh >> 8);  in SHA512_Final()
249   p[sizeof(sha->u) - 11] = (uint8_t)(sha->Nh >> 16);  in SHA512_Final()
250   p[sizeof(sha->u) - 12] = (uint8_t)(sha->Nh >> 24);  in SHA512_Final()
251   p[sizeof(sha->u) - 13] = (uint8_t)(sha->Nh >> 32);  in SHA512_Final()
252   p[sizeof(sha->u) - 14] = (uint8_t)(sha->Nh >> 40);  in SHA512_Final()
253   p[sizeof(sha->u) - 15] = (uint8_t)(sha->Nh >> 48);  in SHA512_Final()
254   p[sizeof(sha->u) - 16] = (uint8_t)(sha->Nh >> 56);  in SHA512_Final()