basic top-level dissection of CRYPT/MAC options