I found these comments regarding AES OFB Mode "This mode is a slightly less common mode, quite similar to CFB above, but which should not be used as a stream cipher due to inherent weaknesses when the data width doesn't match the blocksize of the underlying encryption algorithm" Is ther any reason why the data width affects the AES OFB mode performance? thanks ZG
This is a weird assertion. A block cipher in OFB mode is, functionally, a stream cipher which produces a key-dependent stream of pseudorandom bytes; encryption is then just a XOR of the stream with the data to encrypt (and decryption is identical). Data size is quite irrelevant; to the contrary, OFB is one of these modes which require no padding.
What the commentator probably meant is that OFB should not be used with less than full-block feedback. The "normal" OFB is what is described on the Wikipedia diagrams: each output block (from the block cipher) is used as input for the next block cipher invocation. However, in older times, OFB used a partial feedback, in which the input for the block cipher used only part of the output from the previous block. OFB with partial feedback is slower than normal OFB and was meant to support transmission mediums which lose synchronization. Since OFB with partial feedback turned out to be significantly weaker than full-block OFB, the standard deprecated it. My guess is that the comment you quote was about OFB with partial feedback.
Nobody does OFB with partial feedback, except PHP where the
See the Handbook of Applied Cryptography for details (chapter 7, section 7.2.2). Anyway, even full-block OFB can be considered as inferior to CTR on all points and should be avoided (see this answer for more details). And, of course, authenticated encryption like EAX are much better.