“Differential-Linear Cryptanalysis of Reduced Round ChaCha”. 2024. IACR Transactions on Symmetric Cryptology 2024 (2): 166-89. https://doi.org/10.46586/tosc.v2024.i2.166-189.