Dunkelman, O.; Huang, S. Reconstructing an S-Box from Its Difference Distribution Table. ToSC 2019, 2019, 193-217.