“Tight Multi-User Security Bound of DbHtS” (2023) IACR Transactions on Symmetric Cryptology, 2023(1), pp. 192–223. doi:10.46586/tosc.v2023.i1.192-223.