R. Ostertág and M. Stanek, “On High-Rate Cryptographic Compression Functions”, Comput. Inform., vol. 26, no. 1, pp. 77–87, Jan. 2012.