“Revisiting Randomness Extraction and Key Derivation Using the CBC and Cascade Modes” (2023) IACR Transactions on Symmetric Cryptology, 2023(4), pp. 391–419. doi:10.46586/tosc.v2023.i4.391-419.