“On The Exact Security of Message Authentication Using Pseudorandom Functions” (2017) IACR Transactions on Symmetric Cryptology, 2017(1), pp. 427–448. doi:10.13154/tosc.v2017.i1.427-448.