Reforgeability of authenticated encryption schemes
scientific article; zbMATH DE number 6764614