gcm128.c: fix AAD-only case with AAD length not divisible by 16.