Proof of correctness for AES GCM SIV - View it on GitHub