This implementation uses an internal byte counter of width 32 bits that's additionally shifted by 3 to the left to count bits instead of bytes. The counter overflows after processing 2^32 bits = 512 MB and the library produces wrong digests.