“Quantum Free-Start Collision Attacks on Double Block Length Hashing With Round-Reduced AES-256”. IACR Transactions on Symmetric Cryptology, vol. 2021, no. 1, Mar. 2021, pp. 316-3, https://doi.org/10.46586/tosc.v2021.i1.316-336.