sha3.c: permute() pass correct round to iota() for turboshake

1 files changed, 1 insertions, 1 deletions

diff --git a/sha3.c b/sha3.c
index 6fcb99e..07f1c82 100644
--- a/sha3.c
+++ b/sha3.c
@@ -178,7 +178,7 @@ static inline void permute(uint64_t a[static 25], const size_t num_rounds) {
     rho(a);
     pi(a);
     chi(a);
-    iota(a, i);
+    iota(a, 24 - num_rounds + i);
   }
 }