big-endian values to a 16-byte array. func gcmLengths(len0, len1 uint64) [16]byte { v := [16]byte{} byteorder.BEPutUint64(v[0:], len0) byteorder.BEPutUint64(v[8:], len1) return v } // gcmHashKey represents the 16-byte hash key required by the GHASH algorithm. type gcmHashKey [16]byte type gcmPlatformData struct { hashKey gcmHashKey } func initGCM(g *GCM) { if !useGCM && !useGHASH { return } // Note that hashKey is also used in the KMA codepath to hash large nonces. aes.EncryptBlockInternal(&g.cipher, g.hashKey[:],...