Sun, L. et al. 2021. Linear Cryptanalyses of Three AEADs with GIFT-128 as Underlying Primitives. IACR Transactions on Symmetric Cryptology. 2021, 2 (Jun. 2021), 199–221. DOI:https://doi.org/10.46586/tosc.v2021.i2.199-221.