On Mon, 30 Aug 2004 12:19:20 -0500, Michael Halcrow said: > So I assume that this is done by simply x'oring the first n bytes of > the last block of plaintext with the first n bytes of the last FRE? Yes. Werner