“Cryptanalysis of LowMC instances using single plaintext/ciphertext pair” (2020) IACR Transactions on Symmetric Cryptology, 2020(4), pp. 130–146. doi:10.46586/tosc.v2020.i4.130-146.