Even if you combine the operations so that it works, it may not be obvious whether you've opened yourself to side channels like timing attacks. A naive impleme

Even if you combine the operations so that it works, it may not be obvious whether you've opened yourself to side channels like timing attacks. A naive implementation of the AEAD feature list could trivially allow you to guess the AD for a ciphertext if the AD validation is checked too early in the process.