“The Exact Security of PMAC with Two Powering-Up Masks” (2019) IACR Transactions on Symmetric Cryptology, 2019(2), pp. 125–145. doi:10.13154/tosc.v2019.i2.125-145.