“LM-DAE: Low-Memory Deterministic Authenticated Encryption for 128-Bit Security”. 2020. IACR Transactions on Symmetric Cryptology 2020 (4): 1-38. https://doi.org/10.46586/tosc.v2020.i4.1-38.