Mennink, B.; Neves, S. Optimal PRFs from Blockcipher Designs. ToSC 2017, 2017, 228-252.