1/2^128 = 2^(-1/2 (0.9875×s - 512))