mirror of
https://github.com/ziglang/zig.git
synced 2026-02-02 20:53:44 +00:00
It is assumed that generating a collision requires more than 2^156 ciphertext modifications. This is plenty enough for any practical purposes, but it hasn't been proven to be >= 2^256. Be consistent and conservative here; just claim the same security as the other variants.