“Sound Hashing Modes of Arbitrary Functions, Permutations, and Block Ciphers” (2018) IACR Transactions on Symmetric Cryptology, 2018(4), pp. 197–228. doi:10.13154/tosc.v2018.i4.197-228.