Per rfc7539 Section 2.5, "Read the block as a little-endian number."

sun.security.util.math.intpoly.IntegerPolynomial1305 enforces this on input when input is provided as `[]byte` but not when input is in `ByteBuffer`