finish

Finalize authentication and return hashes plus the tag to append.