From Combined to Hybrid: Making Feedback-based AE even Smaller. (2020). IACR Transactions on Symmetric Cryptology, 2020(S1), 417-445. https://doi.org/10.13154/tosc.v2020.iS1.417-445