CMAC, p. 248 (top right image)