Mennink, Bart. 2025. “Keying Merkle-Damgård at the Suffix”. IACR Transactions on Symmetric Cryptology 2025 (1): 70-96. https://doi.org/10.46586/tosc.v2025.i1.70-96.