Mennink, B., & Neves, S. (2017). Optimal PRFs from Blockcipher Designs. IACR Transactions on Symmetric Cryptology, 2017(3), 228–252. https://doi.org/10.13154/tosc.v2017.i3.228-252