- [PRF](#prf): HMAC-SHA-256
- [AEAD](#aead): AES-256-GCM if the CPU supports AES-NI, ChaCha20-Poly1305 otherwise. More specifically AES-256-GCM is only selected for X86-64 CPUs with AES-NI extension.

Further any secret key (apart from the KMS-generated ones) is 256 bits long. The KMS-generated keys may be 256 bits but this depends on the KMS capabilities and configuration.

¾µpqlZï„Ì* , :09†ê}jPñ QRI¾AY} ãjn¼R[¢XUT<ˆ¬Ó (=4%áÜÆ}^ nvw¾g}ã3}¼#4 1qV7 „EÕ¢GªåuxzKûTEDˆU]û~w„ãx¢KHJï ezil¾LyV ˆÚshW÷e¢ÜÆJbHGfÂÌñ*}GZ¢DCò¬½Rˆ¡´š ­º–€ µv §š´µœ•Œ‚ ®¼^¾¤GUec2co·ainué1ugzûuŠSy\rïrª‘tqZaˆ¥©yñV_S^}“iìdDI}q²¢¤£š˜ ®Ô@x~ìÌ vïú g E‘Ž~G@ô;ouIXxªÕ }^NI®ÃÕ7lM f_BiC|V¨Öy{pª}HOventûah] @SezQwK~igê qRcoQì-in2ì cw°å)V¢zEqV fg²paÐ~mIswxT ÅÕ]Rc¦Nt}¦ cj)‰ +cZEñvï ºqn²u]|ûìrcìvñnZ}IV†æv{}Õ5D¼4 ûRV„Wxxí qqx›gú's ï –¢ [_xÜæ}¨Sï8Œlr]K_A,0FwZR]Æ÷>k`¼Àjq>poSz>mqyjeìw²@[ f|VtŒ™£ Š¿,–¬Œ´™®£ š¦¢EXHªîww¨in®Åktb¸Îø...