On Oct 7, 2015, at 12:37 PM, Werner Koch <wk(_at_)gnupg(_dot_)org> wrote:
OCB works with all 128 bit block length ciphers and is faster than GCM.
So does CCM, and CCM has no intellectual property issues, nor GCM's brittleness.
Jon
_______________________________________________
openpgp mailing list
openpgp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/openpgp