crypto/aes/aes_ccm.c

520 	uint8_t tag[16 + 2], *tagp = tag + 1;
525 	tagp[-1] = tagp[16] = 0x53;
538 		aes_ccm_tag(C, tagp);
546 		if (memcmp(tagp, T[i].tag, T[i].M)) {
549 			hexdump(printf, name, tagp, T[i].M);
574 		memcpy(tagp, T[i].tag, T[i].M);
575 		tagp[0] ^= 0x80;
583 		if (aes_ccm_verify(C, tagp)) {
593 	if (tagp[-1] != 0x53 || tagp[16] != 0x53) {