Sun L, Wang W, Wang M. Linear Cryptanalyses of Three AEADs with GIFT-128 as Underlying Primitives. ToSC. 2021;2021(2):199-221. doi:10.46586/tosc.v2021.i2.199-221