Chakraborty, B., A. Jha, and M. Nandi. “On the Security of Sponge-Type Authenticated Encryption Modes”. IACR Transactions on Symmetric Cryptology, Vol. 2020, no. 2, July 2020, pp. 93-119, doi:10.13154/tosc.v2020.i2.93-119.