P. Farshim, C. Orlandi, and R. Rosie, “Security of Symmetric Primitives under Incorrect Usage of Keys”, ToSC, vol. 2017, no. 1, pp. 449–473, Mar. 2017.