Iwata, Tetsu, and Yannick Seurin. “Reconsidering the Security Bound of AES-GCM-SIV”. IACR Transactions on Symmetric Cryptology, vol. 2017, no. 4, Dec. 2017, pp. 240-67, https://doi.org/10.13154/tosc.v2017.i4.240-267.