CHAKRABORTY, B.; JHA, A.; NANDI, M. On the Security of Sponge-type Authenticated Encryption Modes. IACR Transactions on Symmetric Cryptology, v. 2020, n. 2, p. 93-119, 24 Jul. 2020.