Distinguisher-dependent simulation in two rounds and its applications
scientific article; zbMATH DE number 6807178