HMD5
IV
Y0
CV1
Y1
CV2
128 bits
512 bits
F,T[1...16]
G,T[1...16]
H,T[1...16]
I,T[1...16]
++++
CVq
Y
CVq+1