Mennink, B. 2025. Keying Merkle-Damgård at the Suffix. IACR Transactions on Symmetric Cryptology. 2025, 1 (Mar. 2025), 70–96. DOI:https://doi.org/10.46586/tosc.v2025.i1.70-96.