[shitlord]

Historically, the agency has preferred to throw hardware at the problem. They like to design ciphers that are optimized for cheap and fast hardware implementations (like Simon). And even today, they still design/build a lot of hardware encryptors. It's likely that they are using separate pieces of hardware to accomplish each task: one for message authentication, one for encryption, and one for decryption.