Dunkelman, O., & Huang, S. (2019). Reconstructing an S-box from its Difference Distribution Table. IACR Transactions on Symmetric Cryptology, 2019(2), 193-217. https://doi.org/10.13154/tosc.v2019.i2.193-217