01▲Breaking the Beyond-Birthday-Bound Security of ${\sharp}\textrm{Pencil}$ eprint.iacr.org Attack on #Pencil shows collisions at ~2^(n-7)/2 queries, so the claimed beyond-birthday-bound security was optimistic.authenticated-encryptionbirthday-attackcryptanalysiseprintprf0 pts/metaleak/15 days ago/4 comments