“Revisiting Variable Output Length XOR Pseudorandom Function” (2018) IACR Transactions on Symmetric Cryptology, 2018(1), pp. 314–335. doi:10.13154/tosc.v2018.i1.314-335.