Returning a tuple here doesn't conform to the CipherContext interface.  This internal context should actually conform to AEADCipherContext complete with `add_data` and the `tag` property.