“On the Security of Sponge-Type Authenticated Encryption Modes”. IACR Transactions on Symmetric Cryptology, vol. 2020, no. 2, July 2020, pp. 93-119, https://doi.org/10.13154/tosc.v2020.i2.93-119.