Dobraunig, C., & Mennink, B. (2020). Tightness of the Suffix Keyed Sponge Bound. IACR Transactions on Symmetric Cryptology, 2020(4), 195-212. https://doi.org/10.46586/tosc.v2020.i4.195-212