“Exploiting Weak Diffusion of Gimli: Improved Distinguishers and Preimage Attacks” (2021) IACR Transactions on Symmetric Cryptology, 2021(1), pp. 185–216. doi:10.46586/tosc.v2021.i1.185-216.