paddedGHASH(&hash, lens[:], productTable) copy(counter[:], hash[:]) } } // counterCrypt encrypts in using AES in counter mode and places the result // into out. counter is the initial count value and will be updated with the next // count value. The length of out must be greater than or equal to the length // of in. // counterCryptASM implements counterCrypt which then allows the loop to // be unrolled and optimized. func counterCrypt(b *aes.Block, out, in []byte, counter *[gcmBlockSize]byte) { enc := ...