encrypt then mac, GCM mode, more readme