− | Each section begins with the actual encrypted data, followed by this block metadata. | + | Each section begins with the payload encrypted data, followed by this block metadata. The hash used for the MAC is calculated over the the cleartext payload, this hash is calculated the same way as the section hashes stored in the footer. |