Mella, Silvia, Joan Daemen, and Gilles Van Assche. 2017. “New Techniques for Trail Bounds and Application to Differential Trails in Keccak”. IACR Transactions on Symmetric Cryptology 2017 (1):329-57. https://doi.org/10.13154/tosc.v2017.i1.329-357.