“Cryptanalysis of the Legendre PRF and Generalizations” (2020) IACR Transactions on Symmetric Cryptology, 2020(1), pp. 313–330. doi:10.13154/tosc.v2020.i1.313-330.