Sun, L.; Wang, W.; Wang, M. Linear Cryptanalyses of Three AEADs With GIFT-128 As Underlying Primitives. ToSC 2021, 2021, 199-221.