Summary of changes. We:- Added a link to our website and a reference.- Clarified the leakage-resistance vs. leakage-resistance terminology. - Clarified the fact that the L-box applies to 2l bits already in Algorithms 1 and 2.- Added figures describing Clyde-128 and Shadow-512 and their components.- Fixed a few minor typos of the original submission. - Provide a minor update of the reference implementations.As required, the specifications are unchanged.Note that additional material (discussions, implementations, ...) are available on our website.