ACORN: A Lightweight Authenticated Cipher (v3)
1.3 ACORN-128 ACORN-128 uses a 128-bit key and a 128-bit initialization vector. The associ-ated data length and the plaintext length are less than 264 bits. The authenti-cation tag length is less than or equal to 128 bits. We recommend the use of a 128-bit tag. 1.3.1 The state of ACORN-128 The state size of ACORN-128 is 293 bits.