“Small Stretch Problem of the DCT Scheme and How to Fix It” (2024) IACR Transactions on Symmetric Cryptology, 2024(1), pp. 114–134. doi:10.46586/tosc.v2024.i1.114-134.