Wei, Y. et al. 2018. Generalized Nonlinear Invariant Attack and a New Design Criterion for Round Constants. IACR Transactions on Symmetric Cryptology. 2018, 4 (Dec. 2018), 62–79. DOI:https://doi.org/10.13154/tosc.v2018.i4.62-79.