EAX Mode

M. Bellare and P. Rogaway and D. Wagner have recently proposed a mode that
they call EAX mode, which is an alternative to CCM that has been designed
to be more flexible in use. In particular this mode avoids the need to
know the length of messages at the start of an encryption. Their paper
describing EAX is available here:

	http://www.cs.berkeley.edu/~daw/papers/eax.html