_id,doi,title
1671,10.1007/978-3-662-47989-6_18,The exact PRF security of truncation: Tight bounds for keyed sponges and truncated CBC