Iwata, Tetsu, and Yannick Seurin. “Reconsidering the Security Bound of AES-GCM-SIV”.
IACR Transactions on Symmetric Cryptology
2017, no. 4 (December 15, 2017): 240–267. Accessed April 9, 2025.
https://tosc.iacr.org/index.php/ToSC/article/view/810
.