Mennink, B. (2025). Keying Merkle-Damgård at the Suffix. IACR Transactions on Symmetric Cryptology, 2025(1), 70-96. https://doi.org/10.46586/tosc.v2025.i1.70-96