Although a 128-bit digest provides little collision resistance it can be used as a MAC, as found in the WireGuard protocol. Change-Id: I06ee528e5711035da8f1b254c223a6fda8890abf Reviewed-on: https://go-review.googlesource.com/39370 Reviewed-by: Adam Langley <agl@golang.org>