“Differential-Linear Cryptanalysis of Reduced Round ChaCha” (2024) IACR Transactions on Symmetric Cryptology, 2024(2), pp. 166–189. doi:10.46586/tosc.v2024.i2.166-189.