Support CBC-MAC and its variants

[emmansun]

Reference: GB/T 15821.1-2020 Security techniques - Message authentication codes - Part 1: Mechanisms using block ciphers.

• CBC-MAC (填充方式2)
• EMAC (填充方式2)
• ANSI retail MAC (填充方式2)
• MacDES (填充方式2)，K''采用示例诱导方式（每隔4bits交替取补和不变）
• CMAC (填充方式4)
• LMAC (填充方式2)
• TrCBC (填充方式4)
• CBCR (填充方式4)

Note:
For security and performance reasons, please use block cipher-based message authentication mechanisms with caution.

安全分析和消息鉴别码长度选择

• GB/T 15821.1-2020 附录C：MAC算法的安全性分析
• NIST SP 800-38B, Appendix A: Length of the MAC

Larger values of Tlen provide greater assurance against guessing attacks. The performance
tradeoff is that larger values of Tlen require more bandwidth/storage for the MAC.

For most applications, a value for Tlen that is at least 64 should provide sufficient protection
against guessing attacks. A value of Tlen that is less than 64 shall only be used in conjunction
with a careful analysis of the risks of accepting an inauthentic message as authentic.

In particular, a value of Tlen smaller than 64 should not be used unless the controlling protocol or
system sufficiently restricts the number of times that the verification process can return INVALID,
across all implementations with any given key. For example, the short duration of a session or,
more generally, the low bandwidth of the communication channel may preclude many repeated
trials.

[emmansun]

v0.29.5