some start/end fixes. ALSO now verifying crypto tag in GCM via secure-equal (derr)