- so many to pick from - mbedtls has 3: smaller, 'alt', and normal? - simple version in `micropython/extmod/crypto-algorithms/sha256.c` - secp256k1 as one too, single-step transform