“On the Security of Sponge-Type Authenticated Encryption Modes”. 2020. IACR Transactions on Symmetric Cryptology 2020 (2): 93-119. https://doi.org/10.13154/tosc.v2020.i2.93-119.