> A CPU may not be able to perform unaligned loads and stores.

Sure. That's why _BitInt(384) should have sufficient alignment
requirements so it can be loaded into such a SHA acceleration register
in a single load operation of some kind.

I'm still not seeing where the "Vodoo" is. This is basic and commonly
understood stuff.