2021. Orthros: A Low-Latency PRF. IACR Transactions on Symmetric Cryptology. 2021, 1 (Mar. 2021), 37–77. DOI:https://doi.org/10.46586/tosc.v2021.i1.37-77.