[grumbelbart2]

Do you have an example? That just sounds like a hash that is a few bits longer.

[shakna]

Mostly use of GCM (Galois/Counter Mode). Usually you tag the key, but you can also tag the value to check verification of collisions instead.

But as I said, slow.