“Highly Secure Nonce-based MACs from the Sum of Tweakable Block Ciphers” (2020) IACR Transactions on Symmetric Cryptology, 2020(4), pp. 39–70. doi:10.46586/tosc.v2020.i4.39-70.