On the Security of Sponge-type Authenticated Encryption Modes. ToSC. 2020;2020(2):93-119. doi:10.13154/tosc.v2020.i2.93-119