“Building PRFs from TPRPs: Beyond the Block and the Tweak Length Bounds” (2024) IACR Transactions on Symmetric Cryptology, 2024(1), pp. 35–70. doi:10.46586/tosc.v2024.i1.35-70.