“Quantum Free-Start Collision Attacks on Double Block Length Hashing with Round-Reduced AES-256”, ToSC, vol. 2021, no. 1, pp. 316–336, Mar. 2021, doi: 10.46586/tosc.v2021.i1.316-336.