CCM-SIV: Single-PRF Nonce-Misuse-Resistant Authenticated Encryption. - Patrick Kresmer; Alexander Zeh (IACR Cryptol. ePrint Arch., 2019)