“Cryptanalysis of AES-PRF and Its Dual” (2018) IACR Transactions on Symmetric Cryptology, 2018(2), pp. 161–191. doi:10.13154/tosc.v2018.i2.161-191.