“Commutative Cryptanalysis Made Practical” (2023) IACR Transactions on Symmetric Cryptology, 2023(4), pp. 299–329. doi:10.46586/tosc.v2023.i4.299-329.