Can we hold off discussing these until after we get p1619 out the door?
I would like to hear a consensus from the other members that a new PAR P1619a for large block encryption would be warranted? My vote is yes.
In the past we discussed including these modes in a standard for "captured modes" (i.e., modes with no inter-operability requirements), something like 1619.2. My vote will be "yes" in principle, but only after we are done with 1619. -- Shai
