Naito, Y., Sasaki, Y., & Sugawara, T. (2020). LM-DAE: Low-Memory Deterministic Authenticated Encryption for 128-bit Security. IACR Transactions on Symmetric Cryptology, 2020(4), 1–38. https://doi.org/10.46586/tosc.v2020.i4.1-38