There are other cryptographers that tend to agree that encrypt-then-mac is optimal.[0] [0]http://www.thoughtcrime.org/blog/the-cryptographic-doom-principle/ ht

There are other cryptographers that tend to agree that encrypt-then-mac is optimal.[0] [0]http://www.thoughtcrime.org/blog/the-cryptographic-doom-principle/ http://www.thoughtcrime.org/blog/the-cryptographic-doom-prin...