Type Aegis256X2Mac [src]

The Aegis256X2Mac message authentication function has a 256-bit key size, and outputs 256 bit tags. The key size is the main practical difference with Aegis128X2Mac. AEGIS' large state, non-linearity and non-invertibility provides the following properties: 256 bit security against forgery. Recovering the secret key from the state would require ~2^256 attempts, which is infeasible for any practical adversary. It has a large security margin against internal collisions.