“Key Committing Attacks against AES-based AEAD Schemes” (2024) IACR Transactions on Symmetric Cryptology, 2024(1), pp. 135–157. doi:10.46586/tosc.v2024.i1.135-157.