Differences implementation of chain function for sha256 #7
Description
According to the SLH-DSA specification, there are differences in the implementation of the chain function for sha256. Would you please explain about the design of the chain function? Thanks