“Revisiting Variable Output Length XOR Pseudorandom Function”. IACR Transactions on Symmetric Cryptology, vol. 2018, no. 1, Mar. 2018, pp. 314-35, https://doi.org/10.13154/tosc.v2018.i1.314-335.