Erlacher, J.; Mendel, F.; Eichlseder, M. Bounds for the Security of Ascon Against Differential and Linear Cryptanalysis. ToSC 2022, 2022, 64-87.