The Multi-user Security of Authenticated Encryption: AES-GCM in TLS 1.3
The Software Performance of Authenticated-Encryption Modes