P. Farshim, C. Orlandi, and R. Rosie, “Security of Symmetric Primitives under Incorrect Usage of Keys”, ToSC, vol. 2017, no. 1, pp. 449–473, Mar. 2017, doi: 10.13154/tosc.v2017.i1.449-473.