Fault Attacks on Nonce-based Authenticated Encryption: Application to Keyak and Ketje

Publication
In SAC