Bariant, A., Bouvier, C., Leurent, G., & Perrin, L. (2022). Algebraic Attacks against Some Arithmetization-Oriented Primitives. IACR Transactions on Symmetric Cryptology, 2022(3), 73–101. https://doi.org/10.46586/tosc.v2022.i3.73-101