first is 1 if and only if min_next_nonce is non-zero, so we don't need to waste the 8 bytes keep track of it. (Note 564 in evp_aead_ctx_st_state was actually 568 because of alignment. Going down to 560 reduces it by 8 bytes.) Change-Id: I7156f317e4ccd227a39732360e421ff7e55cc611 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/78487 Auto-Submit: David Benjamin <davidben@google.com> Commit-Queue: Adam Langley <agl@google.com> Reviewed-by: Adam Langley <agl@google.com>