T. Iwata and K. Minematsu, “Stronger Security Variants of GCM-SIV”, ToSC, vol. 2016, no. 1, pp. 134–157, Dec. 2016.