2019. Substitution Attacks against Message Authentication. IACR Transactions on Symmetric Cryptology. 2019, 3 (Sep. 2019), 152–168. DOI:https://doi.org/10.13154/tosc.v2019.i3.152-168.