DOBRAUNIG, C.; MENNINK, B. Tightness of the Suffix Keyed Sponge Bound. IACR Transactions on Symmetric Cryptology, v. 2020, n. 4, p. 195-212, 10 Dec. 2020.