“Towards Key-Recovery-Attack Friendly Distinguishers: Application to GIFT-128”. 2021. IACR Transactions on Symmetric Cryptology 2021 (1): 156-84. https://doi.org/10.46586/tosc.v2021.i1.156-184.