fn gmac_nonce(msg: &[u8], server_sender: bool) -> [u8; 12]
AES-GMAC nonce for signing ([MS-SMB2] §3.1.4.1): MessageId in the low 8 bytes; in the top 4 bytes bit 0 marks a server-sent message and bit 1 an SMB2 CANCEL request.