This new string doesn't totally make sense. There's only one message with one MAC on it.  We then calculate a MAC over the ciphertext and ensure that it matches the MAC on the message.