This code was primarily written by Jonathan Protzenko.
Son Ho (INRIA) added support for blake2.