@whitequark i think it's trying to say to pad last block (0 to 127 incl. bits) of plaintext with 1 then a bunch of 0, and then chomp off the corresponding bits in the ciphertext because you don't need it, but god knows why it's trying to split the cipher state instead.
it's like pumping drinking water from a river by diverting a part of the river to your front yard and then sending the unused portion back into the main flow