• crypto/sha2: fix append's O(n²) block-extraction loop — rewritten as a fold over chunkList, with the config-invariant partial applications hoisted. A 320,000-byte input drops from 3444 ms to 116 ms #1203