No, MAC-then-encrypt is very, very hard to get right, because you have to avoid creating side-channels (including timing side-channels) between the decryption operation, the padding check (if you&#x27;re using a block cipher mode that requires padding), and the MAC check.<p>More to the point, if you&#x27;re fielding a new MAC-then-encrypt design, then I don&#x27;t trust your crypto, because your crypto knowledge is over a decade old.  Krawczyk&#x27;s paper was published in 2001: <a href="https:&#x2F;&#x2F;eprint.iacr.org&#x2F;2001&#x2F;045" rel="nofollow">https:&#x2F;&#x2F;eprint.iacr.org&#x2F;2001&#x2F;045</a>