Naito, Y., Y. Sasaki, and T. Sugawara. “LM-DAE: Low-Memory Deterministic Authenticated Encryption for 128-Bit Security”. IACR Transactions on Symmetric Cryptology, vol. 2020, no. 4, Dec. 2020, pp. 1-38, doi:10.46586/tosc.v2020.i4.1-38.