pub fn digest_words(state: [b64; 8]) -> Words512Expand description
SHA-512 state words as the little-endian 512-bit digest.
state is the final chaining value H0..H7 (big-endian words). The
result is the 64-byte digest read as a little-endian integer, which is how
Ed25519 interprets SHA-512 output.