“Classical and Quantum Meet-in-the-Middle Nostradamus Attacks on AES-like Hashing” (2023) IACR Transactions on Symmetric Cryptology, 2023(2), pp. 224–252. doi:10.46586/tosc.v2023.i2.224-252.