[PDF] - Cycle counts for authenticated encryption D. J. Bernstein PDF Document