Matilda Backendal, Miro Haller, Kenneth G. Paterson: MEGA: Malleable Encryption Goes Awry. SP 2023: 146-163