Case N|q − 1

symbol size (byte)

q

N (symbols)

message length (bits)

v

MAC size (bits)

ε≤

4

2³²

2¹⁶ ± 1

~2²¹

4

128

2⁻⁹⁶

2

2¹⁶

2⁸ ± 1

~2¹²

6

96

2⁻⁷²

2

2¹⁶

2⁸ ± 1

~2¹²

8

128

2⁻⁹⁶