res is Ok(()) if the encryption/decryption process succeeded. This
does not mean that the message has been verified in the case of
If we are encrypting:
res is Ok(()).
If we are decrypting:
res is Ok(()) and the
message authentication tag is valid.