aesCmac

Compute AES-CMAC (RFC 4493) over data with a raw AES key.

Implemented here rather than via AES.CMAC because no provider offers CMAC on every target: BouncyCastle covers JVM/Android and OpenSSL3 covers Linux, but neither Apple provider in cryptography-kotlin 0.5.0 has it. CMAC is CBC-MAC with a tweaked final block, so AES-CBC — which every provider does have — is enough to build it.