2022. On the Quantum Security of OCB. IACR Transactions on Symmetric Cryptology. 2022, 2 (Jun. 2022), 379–414. DOI:https://doi.org/10.46586/tosc.v2022.i2.379-414.