2024. Differential-Linear Cryptanalysis of Reduced Round ChaCha. IACR Transactions on Symmetric Cryptology. 2024, 2 (Jun. 2024), 166–189. DOI:https://doi.org/10.46586/tosc.v2024.i2.166-189.