TLS_TAG_SIZE
static_assert(cipher ## _TAG_SIZE == TLS_TAG_SIZE); \
int offset = rxm->full_len - TLS_TAG_SIZE - 1;