Shuffle implementation around to better isolate it and leave some zeros
at the beginning we have an easily-available identity for addition.