Don't just end on an equation for one-time MACs
Don't use an explicit link for "one-time MACs"; it is already a radio
target
Tweak authenticated encryption section
Tweak image sizes; remove section about AEAD leading to immediate
discarding of messages, since it isn't necessarily immediate