Choudhuri, A. R., & Maitra, S. (2017). Significantly Improved Multi-bit Differentials for Reduced Round Salsa and ChaCha. IACR Transactions on Symmetric Cryptology, 2016(2), 261-287. https://doi.org/10.13154/tosc.v2016.i2.261-287