AES-SIV encryption (RFC 5297) under a 512-bit key.
64 bytes: the S2V key, then the CTR key
the bytes to encrypt
the associated data components, in order
the 16-byte synthetic IV followed by the ciphertext
AES-SIV encryption (RFC 5297) under a 512-bit key.