Y. Naito, Y. Sasaki, and T. Sugawara, “LM-DAE: Low-Memory Deterministic Authenticated Encryption for 128-bit Security”, ToSC, vol. 2020, no. 4, pp. 1–38, Dec. 2020.