“Reconsidering the Security Bound of AES-GCM-SIV”. 2017. IACR Transactions on Symmetric Cryptology 2017 (4): 240-67. https://doi.org/10.13154/tosc.v2017.i4.240-267.