2017. Grøstl Distinguishing Attack: A New Rebound Attack of an AES-like Permutation. IACR Transactions on Symmetric Cryptology. 2017, 3 (Sep. 2017), 1–23. DOI:https://doi.org/10.13154/tosc.v2017.i3.1-23.