From eee7d0d84dc7731df2359b243aa5e75d85f6eaef Mon Sep 17 00:00:00 2001 From: JP Aumasson Date: Sat, 22 Oct 2022 07:14:59 +0200 Subject: comments --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'README.md') diff --git a/README.md b/README.md index fa4839e..de90fa7 100644 --- a/README.md +++ b/README.md @@ -54,8 +54,8 @@ security for any function with the same key and output size. The standard PRF security goal allow the attacker access to the output of SipHash on messages chosen adaptively by the attacker. -Security is limited by the key size (128 bits). -Attackers searching 2*s* keys have chance 2*s*−128 of finding +Security is limited by the key size (128 bits for SipHash), such that +attackers searching 2*s* keys have chance 2*s*−128 of finding the SipHash key. Security is also limited by the output size. In particular, when SipHash is used as a MAC, an attacker who blindly tries 2*s* tags will -- cgit v1.2.3