As other functions that accept a signed length, make sure it is sane in NNA_DecryptAuthEF() too.
Add support for the NTS NTP extension fields.