Constant LEGACY_DOMAIN_BYTE 

pub const LEGACY_DOMAIN_BYTE: u8 = 0x01;

Domain byte used by legacy Keccak padding.

SHA3-256 uses 0x06; using it here is a compatibility bug.