var output [32]byte var input [aes.BlockSize]byte input[2] = label copy(input[4:], context[:]) input[1] = 0x01 // i = 1 K1 := kdf.mac.MAC(input[:]) input[1] = 0x02 // i = 2 K2 := kdf.mac.MAC(input[:]) copy(output[:], K1[:]) copy(output[aes.BlockSize:], K2[:]) return output } golang.org/fips140@v1.1.0-rc1/fips140/v1.1.0-rc1/aes/gcm/gcm.go // Copyright 2013 The Go Authors. All rights reserved. // Use of this source code is governed by a BSD-style // license that can be found in the LICENSE file. package...