“Multi-key Analysis of Tweakable Even-Mansour with Applications to Minalpher and OPP” (2017) IACR Transactions on Symmetric Cryptology, 2016(2), pp. 288–306. doi:10.13154/tosc.v2016.i2.288-306.