Grassi, L. (2018). Mixture Differential Cryptanalysis: a New Approach to Distinguishers and Attacks on round-reduced AES. IACR Transactions on Symmetric Cryptology, 2018(2), 133–160. https://doi.org/10.13154/tosc.v2018.i2.133-160