> presumably the flaws in this approach have only become apparent since the book was published A nice concise discussion of Encrypt-then-MAC vs MAC-then-Encryp

> presumably the flaws in this approach have only become apparent since the book was published A nice concise discussion of Encrypt-then-MAC vs MAC-then-Encrypt can be found here: http://crypto.stackexchange.com/questions/202/should-we-mac-then-encrypt-or-encrypt-then-mac http://crypto.stackexchange.com/questions/202/should-we-mac-...