Mennink, Bart. “Keying Merkle-Damgård at the Suffix”. IACR Transactions on Symmetric Cryptology 2025, no. 1 (March 7, 2025): 70–96. Accessed March 28, 2025. https://tosc.iacr.org/index.php/ToSC/article/view/12072.