sha256: Use the same union order as the ctx structure