Revisiting Randomness Extraction and Key Derivation Using the CBC and Cascade Modes. (2023). IACR Transactions on Symmetric Cryptology, 2023(4), 391-419. https://doi.org/10.46586/tosc.v2023.i4.391-419