“On the Security of Sponge-type Authenticated Encryption Modes”, ToSC, vol. 2020, no. 2, pp. 93–119, Jul. 2020, doi: 10.13154/tosc.v2020.i2.93-119.