Mennink, Bart. “Keying Merkle-Damgård at the Suffix”. IACR Transactions on Symmetric Cryptology 2025, no. 1 (March 7, 2025): 70–96. Accessed May 22, 2025. https://er.ceres.rub.de/index.php/ToSC/article/view/12072.