pub const HP_SAMPLE_LEN: usize = 16;
Bytes of AEAD ciphertext sampled to seed the mask cipher — one AES block (RFC 9001 §5.4.2). Always available: every data-plane packet carries at least the 16-byte AEAD tag.