// decrypt ) // kmaGCM executes the encryption or decryption operation given by fn. The tag // will be calculated and written to tag. cnt should contain the current // counter state and will be overwritten with the updated counter state. // TODO(mundaym): could pass in hash subkey // //go:noescape func kmaGCM(fn int, key, dst, src, aad []byte, tag *[16]byte, cnt *[gcmBlockSize]byte) func sealKMA(out []byte, g *GCM, nonce, plaintext, data []byte) { var counter [gcmBlockSize]byte deriveCounter(&g.hashKey,...