LM-DAE: Low-Memory Deterministic Authenticated Encryption for 128-bit Security. ToSC. 2020;2020(4):1-38. doi:10.46586/tosc.v2020.i4.1-38