Cauchois, V., Gomez, C., & Lercier, R. (2017). Grøstl Distinguishing Attack: A New Rebound Attack of an AES-like Permutation. IACR Transactions on Symmetric Cryptology, 2017(3), 1–23. https://doi.org/10.13154/tosc.v2017.i3.1-23