That&#x27;s not MAC-then-encrypt, that&#x27;s &quot;ECB mode is pretty okay if your message and a nonce fits in your block&quot; plus &quot;let&#x27;s make an arbitrary-length block cipher&quot;. In any case, the result is AEAD, not MAC-then-encrypt.<p>(That said, AEZ is really interesting.)