From c03e6bbf6613243bc30788912ad4afbc0b992d47 Mon Sep 17 00:00:00 2001
From: JP Aumasson <jeanphilippe.aumasson@gmail.com>
Date: Mon, 29 Feb 2016 09:53:08 +0100
Subject: [PATCH] comments on 128b security

---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index 79aeb79..fab2a49 100644
--- a/README.md
+++ b/README.md
@@ -64,6 +64,10 @@ Running
 
 will build `siphash24_test_double` and `siphash24_debug_double`.
 
+SipHash with 128-bit tags targets PRF security with 128-bit key and
+128-bit tags. In particular, any attack trying up to 2^s should
+succeed with probability at most 2^(s - 128).
+
 The **128-bit mode is experimental**, use at your own risk.