“Permutation-Based Hashing Beyond the Birthday Bound” (2024) IACR Transactions on Symmetric Cryptology, 2024(1), pp. 71–113. doi:10.46586/tosc.v2024.i1.71-113.