Saha, D. et al. 2017. SymSum: Symmetric-Sum Distinguishers Against Round Reduced SHA3. IACR Transactions on Symmetric Cryptology. 2017, 1 (Mar. 2017), 240–258. DOI:https://doi.org/10.13154/tosc.v2017.i1.240-258.