&gt; presumably the flaws in this approach have only become apparent since the book was published<p>A nice concise discussion of Encrypt-then-MAC vs MAC-then-Encrypt can be found here:<p><a href="http:&#x2F;&#x2F;crypto.stackexchange.com&#x2F;questions&#x2F;202&#x2F;should-we-mac-then-encrypt-or-encrypt-then-mac" rel="nofollow">http:&#x2F;&#x2F;crypto.stackexchange.com&#x2F;questions&#x2F;202&#x2F;should-we-mac-...</a>