“Quantum Free-Start Collision Attacks on Double Block Length Hashing With Round-Reduced AES-256”. 2021. IACR Transactions on Symmetric Cryptology 2021 (1): 316-36. https://doi.org/10.46586/tosc.v2021.i1.316-336.