https://9dok.net/document/q5m463ej-andproducesasingleoutput-ciphertext-plaintext-aconventionalblockciphertakestwoinputs-introduction-davidwagner-mosesliskov-tweakableblockciphers.html