“On the Security of Sponge-type Authenticated Encryption Modes” (2020) IACR Transactions on Symmetric Cryptology, 2020(2), pp. 93–119. doi:10.13154/tosc.v2020.i2.93-119.