Blockcipher-based authenticated encryption: how small can we go?
scientific article