Provably Secure MACs from Differentially-Uniform Permutations and AES-Based Implementations