On the Security of Sponge-type Authenticated Encryption Modes. (2020). IACR Transactions on Symmetric Cryptology, 2020(2), 93-119. https://doi.org/10.13154/tosc.v2020.i2.93-119