Armour, M., and B. Poettering. ‚ÄúSubstitution Attacks Against Message Authentication‚ÄĚ. IACR Transactions on Symmetric Cryptology, Vol. 2019, no. 3, Sept. 2019, pp. 152-68, doi:10.13154/tosc.v2019.i3.152-168.