Recipients should be sorted

[paulmillr]

Spec doesn't mention anything about the order of recipient list. The order matters, since we concat recipients and compute hmac on them.

I think we should sort it alphabetically, or in some other way.