I did this on bulk_extractor, but I did it using libdfxml's hashing support, which does it automatically. Here we also need decryption. And, of course, we need test vectors.