Add support for SIV algorithms which have maximum nonce length shorter than 16 bytes.
As other functions that accept a signed length, make sure it is sane in NNA_DecryptAuthEF() too.