Apply HMAC after encryption.