Sum generates an authenticator for m using a one-time key and puts the result (of length Size) into out.

Verify returns true if mac is a valid authenticator for m with the given key, without leaking timing information.

Size is the size, in bytes, of the result of a call to Sum.