“LM-DAE: Low-Memory Deterministic Authenticated Encryption for 128-bit Security”, ToSC, vol. 2020, no. 4, pp. 1–38, Dec. 2020, doi: 10.46586/tosc.v2020.i4.1-38.