Mella, S., Daemen, J., & Van Assche, G. (2017). New techniques for trail bounds and application to differential trails in Keccak. IACR Transactions on Symmetric Cryptology, 2017(1), 329-357. https://doi.org/10.13154/tosc.v2017.i1.329-357