Indifferentiability of the Sponge Construction with a Restricted Number of Message Blocks. (2023). IACR Transactions on Symmetric Cryptology, 2023(1), 224-243. https://doi.org/10.46586/tosc.v2023.i1.224-243