leiiwang, Li, Yiqiang, Loo Rong Jie, Mahmoud Abuzaina, Mahmoud Aslan, ManHyuk,
Martin Patz, Martin Zeitler, mktozk, Mohammad Ashraf Bhuiyan, mrTsjolder, Naman
Bhalla, Nick Felt, Nicolas Lopez, Niranjan Hasabnis, Nishidha Panpaliya, Nitish,
nrstott, Nutti, Parag Jain, PeterLee, Philipp Jund, Rach L, Rafal Wojdyla,
Roland Zimmermann, Sergei Lebedev, SneakyFish5, Soila Kavulya, Sriram Veturi,

"crypto/internal/fips140/subtle" ) // CMAC implements the CMAC mode from NIST SP 800-38B. // // It is optimized for use in Counter KDF (SP 800-108r1) and XAES-256-GCM // (https://c2sp.org/XAES-256-GCM), rather than for exposing it to applications // as a stand-alone MAC. type CMAC struct { b aes.Block k1 [aes.BlockSize]byte k2 [aes.BlockSize]byte } func NewCMAC(b *aes.Block) *CMAC { c := &CMAC{b: *b} c.deriveSubkeys() return c } func (c *CMAC) deriveSubkeys() { aes.EncryptBlockInternal(&c.b, c.k1[:], c.k1[:])...