Ask Your Cryptographer If Context-Committing AEAD Is Right for You