2019. Reconstructing an S-box from its Difference Distribution Table. IACR Transactions on Symmetric Cryptology. 2019, 2 (Jun. 2019), 193–217. DOI:https://doi.org/10.13154/tosc.v2019.i2.193-217.