h.inner.Write(h.ipad) // If the underlying hash is marshalable, we can save some time by saving a // copy of the hash state now, and restoring it on future calls to Reset and // Sum instead of writing ipad/opad every time. // // We do this on Reset to avoid slowing down the common single-use case. // // This is allowed by FIPS 198-1, Section 6: "Conceptually, the intermediate // results of the compression function on the B-byte blocks (K0 ⊕ ipad) and // (K0 ⊕ opad) can be precomputed once, at the time of generation...

  - Deprecate the default service IP CIDR. The previous default was `10.0.0.0/24` which will be removed in 6 months/2 releases. Cluster admins must specify their own desired value, by using `--service-cluster-ip-range` on kube-apiserver. ([#81668](https://github.com/kubernetes/kubernetes/pull/81668), [@darshanime](https://github.com/darshanime))

- kube-proxy