Fix SHA3 with streaming

Leftover bytes should be added to the buffer, not to the state.

(or, always to the state; we can and probably should eventually get
rid of the buffer)

Fixes ziglang#14851

lib/std/crypto/keccak_p.zig

@@ -231,7 +231,7 @@ pub fn State(comptime f: u11, comptime capacity: u11, comptime delim: u8, compti
                 bytes = bytes[rate..];
             }
             if (bytes.len > 0) {
-                self.st.addBytes(bytes[0..]);
+                mem.copy(u8, &self.buf, bytes);
                 self.offset = bytes.len;
             }
         }