Wait, AES with a minimum of 256 bits? Might be a typo, but there's only one AEAD AES with no more than 256-bits right?
Is there key whitening? (I find it odd that few algorithms have strong or independently generated whitening keys, particularly given that one of the arguments for 128-bit DES is that it would only have 20% more gates)
