Biryukov, A.; Khovratovich, D.; Perrin, L. Multiset-Algebraic Cryptanalysis of Reduced Kuznyechik, Khazad, and Secret SPNs. ToSC 2017, 2016, 226-247.