Thanks for pointing out these issues.<p>Authenticated encryption seems to get popular just these last couple years.  Besides injecting unwanted data into the encrypted data, what other attacks can be done with it?  For encrypted code, injecting unwanted code in the middle of it would be a big problem when decrypted and run.  For pure data file like the the password database, would it be just adding extra garbage?