post-TLS cipher notes