add HMAC integrity generation on encryption and check on decryption
return FALSE in case of integrity error
replace "permuted noise" functions by standard PKCS#7 padding