Frank Denis 32aeb2c2ec
Be more conservative in the description of Aegis256Mac (#16452)
It is assumed that generating a collision requires more than 2^156
ciphertext modifications. This is plenty enough for any practical
purposes, but it hasn't been proven to be >= 2^256.

Be consistent and conservative here; just claim the same security
as the other variants.
2023-07-19 23:59:24 +00:00
..
2023-07-01 22:20:21 -07:00
2023-07-03 01:14:20 -07:00
2023-06-25 23:30:25 -07:00
2023-06-25 14:51:03 -07:00
2023-07-16 18:32:52 -07:00
2023-04-22 13:09:15 +03:00
2023-06-25 14:51:03 -07:00
2023-06-10 20:42:30 -07:00
2023-03-17 17:50:25 +01:00
2023-07-07 11:57:09 -07:00