“Quantum Free-Start Collision Attacks on Double Block Length Hashing With Round-Reduced AES-256”. IACR Transactions on Symmetric Cryptology 2021, no. 1 (March 19, 2021): 316–336. Accessed December 22, 2024. https://moving-the-social.ub.rub.de/index.php/ToSC/article/view/8841.