The cmac patch was upstreamed (pyca/cryptography#3062). Signed-off-by: Jeffery To <jeffery.to@gmail.com>