Iwata, T., and K. Minematsu. “Stronger Security Variants of GCM-SIV”. IACR Transactions on Symmetric Cryptology, Vol. 2016, no. 1, Dec. 2016, pp. 134-57, doi:10.13154/tosc.v2016.i1.134-157.