“Orthros: A Low-Latency PRF”. 2021. IACR Transactions on Symmetric Cryptology 2021 (1): 37-77. https://doi.org/10.46586/tosc.v2021.i1.37-77.