Poettering, Bertram, and Paul Rösler. “Combiners for AEAD”. IACR Transactions on Symmetric Cryptology, vol. 2020, no. 1, May 2020, pp. 121-43, https://doi.org/10.13154/tosc.v2020.i1.121-143.