Iwata, T. and Seurin, Y. (2017) “Reconsidering the Security Bound of AES-GCM-SIV”, IACR Transactions on Symmetric Cryptology, 2017(4), pp. 240–267. doi:10.13154/tosc.v2017.i4.240-267.