Dobraunig, Christoph, and Bart Mennink. “Tightness of the Suffix Keyed Sponge Bound”. IACR Transactions on Symmetric Cryptology, vol. 2020, no. 4, Dec. 2020, pp. 195-12, https://doi.org/10.46586/tosc.v2020.i4.195-212.