“Understanding RUP Integrity of COLM” (2017) IACR Transactions on Symmetric Cryptology, 2017(2), pp. 143–161. doi:10.13154/tosc.v2017.i2.143-161.