What’s Wrong with Poly1305? https://iacr.org/submit/files/slides/2024/rwc/rwc2024/51/slides.pdf