SymSum: Symmetric-Sum Distinguishers Against Round Reduced SHA3. (2017). IACR Transactions on Symmetric Cryptology, 2017(1), 240-258. https://doi.org/10.13154/tosc.v2017.i1.240-258