Fig. 4From: Generic attacks on small-state stream cipher constructions in the multi-user settingThe TinyJAMBU v2 mode for 128-bit state (Hongjun and Tao 2021). AD is denoted as association data. Denote \(P_i\) by processing the permutation i time(s)Back to article page