e. The first time with the 13 bytes of TLS &quot;header&quot; data, and the second time with the entire record including the MAC itself and any padding. The entire record length must equal the value passed in the &quot;tls-data-size&quot; parameter. The length passed in the <b>datalen</b> parameter to EVP_MAC_update() should be equal to the length of the record after the MAC and any padding has been removed.</p>

</dd>
</dl>

<p>All these parameters should be used before the calls to any of EVP_MAC_init(), 