membership_tag = MAC(membership_key, AuthenticatedContentTBM)