In the case of sponge construction, it is shown to be differentiable from a RO. In the paper by Bertoni et al., what is meant by the node being saturated. How does it become saturated and the condition which leads to error in the simulator was not clear. Paper link: http://citeseerx.ist.psu.edu/v...