4 ms·

Proper AEAD becomes a lot simpler, on the other hand a lot of structural information is just plain there.

• tptacek 7y ago
  That's a fair point; you'd do better than either design with a true encrypted filesystem.