On Friday, March 1, 2002, at 07:31 , Wei Dai wrote:
The security of CTR mode is well-analyzed and well-understood.
The Real Cryptographers (tm) that I talk with would strongly dispute that assertion, though (fortunately) they have better diplomatic skills than I do. Ran