Gunsing, A., J. Daemen, and B. Mennink. “Errata to Sound Hashing Modes of Arbitrary Functions, Permutations, and Block Ciphers”. IACR Transactions on Symmetric Cryptology, Vol. 2020, no. 3, Sept. 2020, pp. 362-6, doi:10.13154/tosc.v2020.i3.362-366.