sha256: cast shift to uint64_t