fn calculate_mac(iv: &[u8], data: &[u8], mac_key: &[u8; 32]) -> [u8; 32]
Generate a MAC using HMAC-SHA256 over the IV and ciphertext, without length prefixes or associated data.