The IV and integrity check value (ICV, aka tag) could use their own types. Just newtype wrappers around bytestring would be rather useful. Thoughts? I could make a patch.
i'm planning to do so, but i haven't got enough time to test the types thoroughly. i'm experimenting with this: https://github.com/vincenthz/hs-crypto-types