“Improved Quantum Rebound Attacks on Double Block Length Hashing with Round-Reduced AES-256 and ARIA-256” (2024) IACR Transactions on Symmetric Cryptology, 2024(3), pp. 238–265. doi:10.46586/tosc.v2024.i3.238-265.