https://web.cs.ucdavis.edu/~rogaway/papers/oae.pdf https://web.cs.ucdavis.edu/~rogaway/papers/oae.pdf (Section 7) Previously: https://news.ycombinator.com/item

https://web.cs.ucdavis.edu/~rogaway/papers/oae.pdf https://web.cs.ucdavis.edu/~rogaway/papers/oae.pdf (Section 7) Previously: https://news.ycombinator.com/item?id=21897192 https://news.ycombinator.com/item?id=21897192 STREAM is a well-studied construction for online authenticated encryption. It doesn't just involve an auth tag every few kilobytes (or megabytes, or gigabytes). There's also a byte flag (called a "tag" in some implementations) to indicate whether or not there should be additional blocks or not.