Check MAC before decryption where possible. Closes #15.