“Indifferentiability of the Sponge Construction with a Restricted Number of Message Blocks” (2023) IACR Transactions on Symmetric Cryptology, 2023(1), pp. 224–243. doi:10.46586/tosc.v2023.i1.224-243.