This is a good post, Colin. One thing people reading it may not realize is the importance of picking good IVs and the necessity of including them in the MAC.

This is a good post, Colin. One thing people reading it may not realize is the importance of picking good IVs and the necessity of including them in the MAC. Someone might just authenticate the ciphertext and neglect to include the IV, leaving themselves open to a few attacks.