Grassi, Lorenzo, Dmitry Khovratovich, Reinhard Lüftenegger, Christian Rechberger, Markus Schofnegger, and Roman Walch. “Monolith: Circuit-Friendly Hash Functions With New Nonlinear Layers for Fast and Constant-Time Implementations”. IACR Transactions on Symmetric Cryptology 2024, no. 3 (September 6, 2024): 44–83. Accessed February 5, 2025. https://tches.iacr.org/index.php/ToSC/article/view/11810.