int getOutputSize(int length) => (length + (forEncryption ? macSize : -macSize) + blockSize - 1) ~/ blockSize * blockSize;