sorry; please ignore comment above - it's obviously equivalent for any lossless combination of nonce and counter (and random offset is equivalent to adding nonce and counter, instead of appending)
sorry; please ignore comment above - it's obviously equivalent for any lossless combination of nonce and counter (and random offset is equivalent to adding nonce and counter, instead of appending)