Y. Naito, M. Matsui, T. Sugawara, and D. Suzuki, “SAEB: A Lightweight Blockcipher-Based AEAD Mode of Operation”, TCHES, vol. 2018, no. 2, pp. 192–217, May 2018.