Does the RFC have anything to say about counter overflow? If not we should probably raise a sensible error when it's too large.