Type Aegis128X2Mac [src]

The Aegis128X2Mac message authentication function outputs 256 bit tags. In addition to being extremely fast, its large state, non-linearity and non-invertibility provides the following properties: 128 bit security, stronger than GHash/Polyval/Poly1305. Recovering the secret key from the state would require ~2^128 attempts, which is infeasible for any practical adversary. It has a large security margin against internal collisions.