“ZMAC+ – An Efficient Variable-output-length Variant of ZMAC” (2017) IACR Transactions on Symmetric Cryptology, 2017(4), pp. 306–325. doi:10.13154/tosc.v2017.i4.306-325.