RFC 5116, January 2008; byline D. McGrew. §§2.1–2.3 specify inputs, authenticated decryption failure and associated data; §3.1 specifies nonce distinctness. No expansion of author initials asserted.