“Cryptanalysis of PMACx, PMAC2x, and SIVx” (2017) IACR Transactions on Symmetric Cryptology, 2017(2), pp. 162–176. doi:10.13154/tosc.v2017.i2.162-176.