Biryukov, A.; Khovratovich, D.; Perrin, L. Multiset-Algebraic Cryptanalysis of Reduced Kuznyechik, Khazad, and Secret SPNs. ToSC 2017, 2016 (2), 226-247. https://doi.org/10.13154/tosc.v2016.i2.226-247.