Grassi, Lorenzo, Dmitry Khovratovich, Reinhard Lüftenegger, Christian Rechberger, Markus Schofnegger, and Roman Walch. “Monolith: Circuit-Friendly Hash Functions With New Nonlinear Layers for Fast and Constant-Time Implementations”. IACR Transactions on Symmetric Cryptology 2024, no. 3 (September 6, 2024): 44–83. Accessed January 18, 2025. https://er.ceres.rub.de/index.php/ToSC/article/view/11810.