    private function checkAuthenticationTag() {
        if ($this->authentication_tag === $this->calculateAuthenticationTag()) {
            return true;
        } else {
            throw new JOSE_Exception_UnexpectedAlgorithm('Invalid authentication tag');
        }
    }
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.