pub fn nonce_block(prefix: ScalarWords, msg: Words512) -> [b64; 16]Expand description
Big-endian SHA words of prefix || M with padding (96-byte message).
The 96 bytes fit one 128-byte block together with SHA-512 padding, so the nonce hash needs a single compression.