Support AEAD requests with non-GCM algorithms.

[jhb]

Summary

Support AEAD requests with non-GCM algorithms.

In particular, support chaining an AES cipher with an HMAC for a request
including AAD. This permits submitting requests from userland to encrypt
objects like IPSec packets or TLS frames using these algorithms.

In the non-GCM case, the authentication crypto descriptor covers both the
AAD and the ciphertext. The GCM case remains unchanged. This matches
the requests created internally in IPSec. For the non-GCM case, the
COP_F_CIPHER_FIRST is also supported since the ordering matters.

Test Plan

• using the cryptocheck tool referenced before to submit chained requests combining AES-CBC, AES-CTR, and AES-XTS with SHA HMACs on both ccr and cryptosoft.