“Linear Cryptanalyses of Three AEADs With GIFT-128 As Underlying Primitives”. 2021. IACR Transactions on Symmetric Cryptology 2021 (2): 199-221. https://doi.org/10.46586/tosc.v2021.i2.199-221.