“Revisiting Randomness Extraction and Key Derivation Using the CBC and Cascade Modes”. 2023. IACR Transactions on Symmetric Cryptology 2023 (4): 391-419. https://doi.org/10.46586/tosc.v2023.i4.391-419.