Quantum Free-Start Collision Attacks on Double Block Length Hashing with Round-Reduced AES-256. ToSC. 2021;2021(1):316-336. doi:10.46586/tosc.v2021.i1.316-336