Type Aegis256Mac [src]

The Aegis256Mac message authentication function has a 256-bit key size, and outputs 256 bit tags. The key size is the main practical difference with Aegis128LMac. AEGIS' large state, non-linearity and non-invertibility provides the following properties: 256 bit security against forgery. Recovering the secret key from the state would require ~2^256 attempts, which is infeasible for any practical adversary. It has a large security margin against internal collisions.