2021. Quantum Free-Start Collision Attacks on Double Block Length Hashing with Round-Reduced AES-256. IACR Transactions on Symmetric Cryptology. 2021, 1 (Mar. 2021), 316–336. DOI:https://doi.org/10.46586/tosc.v2021.i1.316-336.