use RFC3961 checksums for CB/exts MIC