c.b, c.k1[:], c.k1[:]) msb := shiftLeft(&c.k1) c.k1[len(c.k1)-1] ^= msb * 0b10000111 c.k2 = c.k1 msb = shiftLeft(&c.k2) c.k2[len(c.k2)-1] ^= msb * 0b10000111 } func (c *CMAC) MAC(m []byte) [aes.BlockSize]byte { fips140.RecordApproved() _ = c.b // Hoist the nil check out of the loop. var x [aes.BlockSize]byte if len(m) == 0 { // Special-cased as a single empty partial final block. x = c.k2 x[len(m)] ^= 0b10000000 aes.EncryptBlockInternal(&c.b, x[:], x[:]) return x } for len(m) >= aes.BlockSize { ...

c.b, c.k1[:], c.k1[:]) msb := shiftLeft(&c.k1) c.k1[len(c.k1)-1] ^= msb * 0b10000111 c.k2 = c.k1 msb = shiftLeft(&c.k2) c.k2[len(c.k2)-1] ^= msb * 0b10000111 } func (c *CMAC) MAC(m []byte) [aes.BlockSize]byte { fips140.RecordApproved() _ = c.b // Hoist the nil check out of the loop. var x [aes.BlockSize]byte if len(m) == 0 { // Special-cased as a single empty partial final block. x = c.k2 x[len(m)] ^= 0b10000000 aes.EncryptBlockInternal(&c.b, x[:], x[:]) return x } for len(m) >= aes.BlockSize { ...