what the fuck does this diagram mean
what does it mean for two 128-bit values to "converge together"
edit: oh i guess they aren't 128-bit. but this isn't helping much
edit2: ohhh, they're making it possible to get less than 128 bits out in the last ciphertext block
