pub fn absorb(poly: &mut Polyval, msg: &[u8]) -> [u8; 16]
Absorb message into Polyval with HCTR2/HCTR3-style padding.
Pads incomplete blocks with a single 1 bit followed by zeros.