[aborsy]

That’s not how it works!

That 128 bits is theoretical upper bound, not necessarily an achievable security rate. That’s the point of margin.

[dependenttypes]

Very well, in that case, which symmetric encryption algorithm would you say has an acceptable security margin?