“Chosen-Prefix Collisions on AES-like Hashing” (2024) IACR Transactions on Symmetric Cryptology, 2024(4), pp. 64–96. doi:10.46586/tosc.v2024.i4.64-96.