reserve a few more bits for future cipher modes