tree 6fc27cd01d06541a56c328090f5611807deece95
parent 6c8183f0c92c953d421289d22b75de76c2ab5347
author openluopworld <luopengxq@gmail.com> 1632021484 +0800
committer openluopworld <luopengxq@gmail.com> 1632021603 +0800

bugfix: if the len of iv is not 96-bit, y0 can be calculated incorrectly
An initialization vector IV can have any number of bits between 1 and
2^64. So it should be filled to the lower 64-bit in the last step
when computing ghash.

Signed-off-by: openluopworld <luopengxq@gmail.com>