“Efficient Length Doubling From Tweakable Block Ciphers” (2017) IACR Transactions on Symmetric Cryptology, 2017(3), pp. 253–270. doi:10.13154/tosc.v2017.i3.253-270.