Grøstl Distinguishing Attack: A New Rebound Attack of an AES-like Permutation. ToSC. 2017;2017(3):1-23. doi:10.13154/tosc.v2017.i3.1-23