Maybe expand on the fact that you don't need an HMAC here, as described in the intro? In fact, maybe there should be a subsection for Authenticated modes?