(1)
Armour, M.; Poettering, B. Substitution Attacks Against Message Authentication. ToSC 2019, 2019, 152-168.