(untitled)

"Could you support $SMALL_TWEAK? We need it for $OBSCURE_PROTOCOL. It's very small! Why not?? Do you hate us?" Here is a bunch of work to fix assembly that assumed it could overread/write the AES-GCM ciphertext because it'd be followed by 16 bytes of tag, but we regrettably support custom tag sizes. https:// go.dev/cl/801600 (Also, what I think are some pretty cool systematic page-faulting tests.)