Reconstructing an S-box from its Difference Distribution Table. (2019). IACR Transactions on Symmetric Cryptology, 2019(2), 193-217. https://doi.org/10.13154/tosc.v2019.i2.193-217