def padding
import bend-collections@1.0.0.0/proofs/crypto/sha/packed/core_model.bend as CoreModelimport Base
489# The padding suffix built only with tail-recursive loops.
490def padding(+n: Nat) -> List<&2, U32>:
491 128 <> zeros_onto(Nat.mod(Nat.sub(119n, Nat.mod(n, 64n)), 64n), bit_length(n))