“Linear Cryptanalyses of Three AEADs with GIFT-128 as Underlying Primitives”, ToSC, vol. 2021, no. 2, pp. 199–221, Jun. 2021, doi: 10.46586/tosc.v2021.i2.199-221.