Rogaway brought it back with a vengeance back in 2006, with SIV: <a href="http:&#x2F;&#x2F;web.cs.ucdavis.edu&#x2F;~rogaway&#x2F;papers&#x2F;keywrap.pdf" rel="nofollow">http:&#x2F;&#x2F;web.cs.ucdavis.edu&#x2F;~rogaway&#x2F;papers&#x2F;keywrap.pdf</a><p>Essentially all &#x27;misuse resistant&#x27; modes are some form of MtE, since in those modes one necessarily needs to process the entire message before beginning encryption. AEZ is MtE in the loosest sense, basically another way to say it&#x27;s a two-pass&#x2F;offline mode.