Comment by tptacek

You can't safely encrypt without authentication, so you do indeed need it.