“Quantum Security Analysis of AES” (2019) IACR Transactions on Symmetric Cryptology, 2019(2), pp. 55–93. doi:10.13154/tosc.v2019.i2.55-93.