Farshim, P., Orlandi, C., & Rosie, R. (2017). Security of Symmetric Primitives under Incorrect Usage of Keys. IACR Transactions on Symmetric Cryptology, 2017(1), 449–473. https://doi.org/10.13154/tosc.v2017.i1.449-473