Chakraborty, Bishwajit, et al. “On the Security of Sponge-Type Authenticated Encryption Modes”. IACR Transactions on Symmetric Cryptology, vol. 2020, no. 2, July 2020, pp. 93-119, doi:10.13154/tosc.v2020.i2.93-119.