“Bounds for the Security of Ascon against Differential and Linear Cryptanalysis” (2022) IACR Transactions on Symmetric Cryptology, 2022(1), pp. 64–87. doi:10.46586/tosc.v2022.i1.64-87.