Frixons, P. and Schrottenloher, A. 2022. Quantum Security of the Legendre PRF. Mathematical Cryptology. 1, 2 (Mar. 2022), 52–69.