Bounds for the Security of Ascon Against Differential and Linear Cryptanalysis. ToSC 2022, 2022 (1), 64-87. https://doi.org/10.46586/tosc.v2022.i1.64-87.