Mennink, Bart. “Keying Merkle-Damgård at the Suffix”. IACR Transactions on Symmetric Cryptology, vol. 2025, no. 1, Mar. 2025, pp. 70-96, https://doi.org/10.46586/tosc.v2025.i1.70-96.