SUN, L.; WANG, W.; WANG, M. Linear Cryptanalyses of Three AEADs with GIFT-128 as Underlying Primitives. IACR Transactions on Symmetric Cryptology, v. 2021, n. 2, p. 199-221, 11 Jun. 2021.