A Security Analysis of the Composition of ChaCha20 and Poly1305.
Universal classes of hash functions (Extended Abstract)