Linear Cryptanalyses of Three AEADs with GIFT-128 as Underlying Primitives. ToSC [Internet]. 2021 Jun. 11 [cited 2024 Dec. 27];2021(2):199-221. Available from: https://tches.iacr.org/index.php/ToSC/article/view/8909