Exploiting Weak Diffusion of Gimli: Improved Distinguishers and Preimage Attacks. (2021). IACR Transactions on Symmetric Cryptology, 2021(1), 185-216. https://doi.org/10.46586/tosc.v2021.i1.185-216