P. Derbez, “Cryptanalysis of AES-PRF and Its Dual”, ToSC, vol. 2018, no. 2, pp. 161–191, Jun. 2018.