Parallelizable authenticated encryption with small state size
scientific article; zbMATH DE number 7223532