“Maximums of the Additive Differential Probability of Exclusive-Or” (2021) IACR Transactions on Symmetric Cryptology, 2021(2), pp. 292–313. doi:10.46586/tosc.v2021.i2.292-313.