Mennink, Bart, and Samuel Neves. “Optimal PRFs from Blockcipher Designs”. IACR Transactions on Symmetric Cryptology 2017, no. 3 (September 19, 2017): 228–252. Accessed April 15, 2025. https://tosc.iacr.org/index.php/ToSC/article/view/772.