> The epoch 16 bytes are used as an AES-128 key, and the current count of total windows since the first sync is used as the IV. This is kind of ambiguous to me. Do you mean operating in CTR mode directly, or is the count an actual IV for some other mode (GCM perhaps)?