The Evolution of Authenticated Encryption (2013) [pdf]
crypto.stanford.edu