Well, the block cipher methods `update`, `encrypt` and `decrypt` (which currently feed CMAC in EAX mode) are currently defined as accepting byte strings too, not bytearrays. This change still does not belong here (not to say it is not an improvement, just noting that it changes the API, and if it does there should be unit tests and such).