Substitution Attacks against Message Authentication. - Armour, Marcel; Poettering, Bertram (IACR Trans. Symmetric Cryptol., 2019)