Mennink, Bart, and Samuel Neves. “Optimal PRFs from Blockcipher Designs”. IACR Transactions on Symmetric Cryptology, vol. 2017, no. 3, Sept. 2017, pp. 228-52, https://doi.org/10.13154/tosc.v2017.i3.228-252.