“Cascading Four Round LRW1 is Beyond Birthday Bound Secure” (2023) IACR Transactions on Symmetric Cryptology, 2023(4), pp. 365–390. doi:10.46586/tosc.v2023.i4.365-390.