Return to Article Details On the Security of Sponge-type Authenticated Encryption Modes Download Download PDF