Sun, L., Wang, W., & Wang, M. (2021). Linear Cryptanalyses of Three AEADs with GIFT-128 as Underlying Primitives. IACR Transactions on Symmetric Cryptology, 2021(2), 199-221. https://doi.org/10.46586/tosc.v2021.i2.199-221