“On The Exact Security of Message Authentication Using Pseudorandom Functions”. 2017. IACR Transactions on Symmetric Cryptology 2017 (1): 427-48. https://doi.org/10.13154/tosc.v2017.i1.427-448.