Jha, Ashwin, et al. “On The Exact Security of Message Authentication Using Pseudorandom Functions”. IACR Transactions on Symmetric Cryptology, vol. 2017, no. 1, Mar. 2017, pp. 427-48, https://doi.org/10.13154/tosc.v2017.i1.427-448.