fmac using aes in cbc. Key rotation is reused every 128 blocks.

Original writeup (http://grazfather.github.io/ctf/crypto/2018/05/06/Plaid2018-macsh.html).