Fix pointer arithmetic when creating and verifying message authentication codes.