Chaigneau, C., & Gilbert, H. (2016). Is AEZ v4.1 Sufficiently Resilient Against Key-Recovery Attacks?. IACR Transactions on Symmetric Cryptology, 2016(1), 114–133. https://doi.org/10.13154/tosc.v2016.i1.114-133