am f3539ea8: (-s ours) GCM tags in ciphertext, rather than in params.

* commit 'f3539ea871f203eaf7da8b29da0bf861ecd40f12':
  GCM tags in ciphertext, rather than in params.