“Release of Unverified Plaintext: Tight Unified Model and Application to ANYDAE” (2020) IACR Transactions on Symmetric Cryptology, 2019(4), pp. 119–146. doi:10.13154/tosc.v2019.i4.119-146.