“Tighter Trail Bounds for Xoodoo” (2023) IACR Transactions on Symmetric Cryptology, 2023(4), pp. 187–214. doi:10.46586/tosc.v2023.i4.187-214.