@david_chisnall as for (2) you are asking fir double integrity checking, what's the use? Again independent processing would require an additional MAC.. potentially a MAC could be used for error correction, but it would be quite ecpensive to do that w/o introducing forgeability issues.