Sun, Ling, Wei Wang, and Meiqin Wang. “Linear Cryptanalyses of Three AEADs With GIFT-128 As Underlying Primitives”. IACR Transactions on Symmetric Cryptology 2021, no. 2 (June 11, 2021): 199–221. Accessed April 24, 2024. https://tosc.iacr.org/index.php/ToSC/article/view/8909.