CCM_AAD_FIELD_SIZE
b0_len += CCM_AAD_FIELD_SIZE;
KASSERT(b0_len - CCM_B0_SIZE == CCM_AAD_FIELD_SIZE,
memset(dst + CCM_AAD_FIELD_SIZE, 0,
8 - CCM_AAD_FIELD_SIZE);