Rogaway has abandoned his patents on OCB[0]. But by now, AES-GCM has hardware support and is ubiquitous. Nowadays, misuse resistance and resistance against part

Rogaway has abandoned his patents on OCB[0]. But by now, AES-GCM has hardware support and is ubiquitous. Nowadays, misuse resistance and resistance against partitioning oracle attacks are things you'd (also) expect from a modern AEAD design. AEGIS outperforms AES-OCB. The AEAD horse has already left the barn; there is no longer any point in closing the door. [0] https://mailarchive.ietf.org/arch/msg/cfrg/qLTveWOdTJcLn4HP3ev-vrj05Vg/ https://mailarchive.ietf.org/arch/msg/cfrg/qLTveWOdTJcLn4HP3...