http://discocrypto.com/disco.html#out-of-order-transport-messages EncryptWithAd should authenticate the `ad`