Security primitives: RFC vectors, replay/window, authenticated encryption and account binding passed.