Adds plaintext validation

[ggkitsas]

We include the (encrypted) digest of the plaintext in the ciphertext. After decryption we validate the recovered plaintext against the decrypted digest