“Reconstructing an S-box from its Difference Distribution Table” (2019) IACR Transactions on Symmetric Cryptology, 2019(2), pp. 193–217. doi:10.13154/tosc.v2019.i2.193-217.