“Tight Multi-User Security Bound of DbHtS”. 2023. IACR Transactions on Symmetric Cryptology 2023 (1): 192-223. https://doi.org/10.46586/tosc.v2023.i1.192-223.