Reconsidering the Security Bound of AES-GCM-SIV. ToSC. 2017;2017(4):240-267. doi:10.13154/tosc.v2017.i4.240-267