“Bounded Surjective Quadratic Functions over Fnp for MPC-/ZK-/FHE-Friendly Symmetric Primitives” (2023) IACR Transactions on Symmetric Cryptology, 2023(2), pp. 94–131. doi:10.46586/tosc.v2023.i2.94-131.