Chakraborty, Bishwajit, Ashwin Jha, and Mridul Nandi. “On the Security of Sponge-Type Authenticated Encryption Modes”. IACR Transactions on Symmetric Cryptology 2020, no. 2 (July 24, 2020): 93–119. Accessed March 29, 2024. https://tosc.iacr.org/index.php/ToSC/article/view/8670.