This is from Dan Boneh's Lecture where he talks about operating a PRF (AES, DES) in Deterministic Counter Mode.
Dan Boneh says
What we could do is we could use what's called a deterministic counter mode. So in a deterministic counter mode, basically we build a stream cipher out of the block cipher. So suppose we have a PRF, F. So again you should think of AES when I say that. So AES is also a secure PRF. And what we'll do is, basically, we'll evaluate AES at the point zero, at the point one, at the point two, up to the point L. This will generate a pseudo random pad. And I will XOR that with all the message blocks and recover the ciphertext as a result. Okay, so really this is just a stream cipher that's built out of a PRF, like AES and triple DES, and it's a simple way to do encryption.
What exactly does he mean by "Evaluating at point 0, point 1" etc?
Does he mean encrypting the numbers 0, 1, 2, etc using AES?
i.e. something like
for (i = 0; i < messagelen; ++i) plaintext = PadToBlockLength(i); Output(AES-PRF(key, plaintext));
where the Output function generates one unit of the PRG with each call.