Frixons, P.; Schrottenloher, A. Quantum Security of the Legendre PRF. mathcryptology 2022, 1, 52-69.