“Towards Tight Differential Bounds of Ascon: A Hybrid Usage of SMT and MILP” (2022) IACR Transactions on Symmetric Cryptology, 2022(3), pp. 303–340. doi:10.46586/tosc.v2022.i3.303-340.