“Chosen-Key Distinguishers on 12-Round Feistel-SP and 11-Round Collision Attacks on Its Hashing Modes” (2016) IACR Transactions on Symmetric Cryptology, 2016(1), pp. 13–32. doi:10.13154/tosc.v2016.i1.13-32.