https://9dok.net/document/zlgxp1r2-sicherheit-von-encrypt-then-authenticate-π.html