“Improved Meet-in-the-Middle Preimage Attacks against AES Hashing Modes” (2020) IACR Transactions on Symmetric Cryptology, 2019(4), pp. 318–347. doi:10.13154/tosc.v2019.i4.318-347.