“SymSum: Symmetric-Sum Distinguishers Against Round Reduced SHA3”. 2017. IACR Transactions on Symmetric Cryptology 2017 (1): 240-58. https://doi.org/10.13154/tosc.v2017.i1.240-258.