Frank Denis 32aeb2c2ec
Be more conservative in the description of Aegis256Mac (#16452)
It is assumed that generating a collision requires more than 2^156
ciphertext modifications. This is plenty enough for any practical
purposes, but it hasn't been proven to be >= 2^256.

Be consistent and conservative here; just claim the same security
as the other variants.
2023-07-19 23:59:24 +00:00
..
2023-03-18 16:01:09 -07:00
2023-06-20 12:55:38 -04:00
2023-04-05 23:22:29 -07:00
2023-01-26 16:36:13 -07:00
2023-01-26 16:36:14 -07:00
2023-06-25 14:51:03 -07:00