SymSum: Symmetric-Sum Distinguishers Against Round Reduced SHA3. ToSC. 2017;2017(1):240-258. doi:10.13154/tosc.v2017.i1.240-258