ZMAC+ – An Efficient Variable-output-length Variant of ZMAC. (2017). IACR Transactions on Symmetric Cryptology, 2017(4), 306-325. https://doi.org/10.13154/tosc.v2017.i4.306-325