Accurate Estimate of the Advantage of Impossible Differential Attacks. (2017). IACR Transactions on Symmetric Cryptology, 2017(3), 169-191. https://doi.org/10.13154/tosc.v2017.i3.169-191