Sun, L., W. Wang, and M. Wang. “Linear Cryptanalyses of Three AEADs With GIFT-128 As Underlying Primitives”. IACR Transactions on Symmetric Cryptology, Vol. 2021, no. 2, June 2021, pp. 199-21, doi:10.46586/tosc.v2021.i2.199-221.