[1]
Biryukov, A. et al. 2025. Exact Formula for RX-Differential Probability Through Modular Addition for All Rotations. IACR Transactions on Symmetric Cryptology. 2025, 1 (Mar. 2025), 542–591. DOI:https://doi.org/10.46586/tosc.v2025.i1.542-591.