3 ms·

I thought the weak modes were to more easily crypto analyze it.

• twotwotwo 9y ago
  My understanding is what tptacek said: they were proposed for real-world use, with IoT and other small/embedded platforms as the justification.