We should implement draft-ietf-kitten-aes-cts-hmac-sha2-11, which is soon to be an informational RFC.