Frixons, P., and A. Schrottenloher. “Quantum Security of the Legendre PRF”. Mathematical Cryptology, vol. 1, no. 2, Mar. 2022, pp. 52-69, https://journals.flvc.org/mathcryptology/article/view/130578.