Mennink, B. (2025) “Keying Merkle-Damgård at the Suffix”, IACR Transactions on Symmetric Cryptology, 2025(1), pp. 70–96. doi:10.46586/tosc.v2025.i1.70-96.