Tweakable enciphering schemes using only the encryption function of a block cipher
scientific article; zbMATH DE number 6150468
scientific article