P. Frixons and A. Schrottenloher, “Quantum Security of the Legendre PRF”, mathcryptology, vol. 1, no. 2, pp. 52–69, Mar. 2022.