“Accurate Estimate of the Advantage of Impossible Differential Attacks”. 2017. IACR Transactions on Symmetric Cryptology 2017 (3): 169-91. https://doi.org/10.13154/tosc.v2017.i3.169-191.