“Weak Keys in the Rekeying Paradigm: Application to COMET and mixFeed” (2020) IACR Transactions on Symmetric Cryptology, 2019(4), pp. 272–289. doi:10.13154/tosc.v2019.i4.272-289.