Dunkelman, Orr, and Senyang Huang. 2019. “Reconstructing an S-Box from Its Difference Distribution Table”. IACR Transactions on Symmetric Cryptology 2019 (2): 193-217. https://doi.org/10.13154/tosc.v2019.i2.193-217.