Michael Torla wrote:
However, EME, as described for tweakable "wide block" encryption, restricts the data size to 4096 bits. That may not be the intent of the original EME algorithm, but that's how I the document I saw reads.
The limit in EME is 2048 bytes (=128 AES blocks). Removing that limitation was my main motivation for doing EME*. -- Shai
