There are other cryptographers that tend to agree that encrypt-then-mac is optimal.[0]<p>[0]<a href="http:&#x2F;&#x2F;www.thoughtcrime.org&#x2F;blog&#x2F;the-cryptographic-doom-principle&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.thoughtcrime.org&#x2F;blog&#x2F;the-cryptographic-doom-prin...</a>