How to Abuse and Fix Authenticated Encryption Without Key Commitment. - Ange Albertini; Thai Duong; Shay Gueron; Stefan Kölbl; Atul Luykx; Sophie Schmieg (IACR Cryptol. ePrint Arch., 2020)

Unbindable Kemmy Schmidt: ML-KEM is neither MAL-BIND-K-CT nor MAL-BIND-K-PK. - Sophie Schmieg (IACR Cryptol. ePrint Arch., 2024)