“Is AEZ v4.1 Sufficiently Resilient Against Key-Recovery Attacks?” (2016) IACR Transactions on Symmetric Cryptology, 2016(1), pp. 114–133. doi:10.13154/tosc.v2016.i1.114-133.