“Meet-in-the-Middle Attacks on Classes of Contracting and Expanding Feistel Constructions” (2017) IACR Transactions on Symmetric Cryptology, 2016(2), pp. 307–337. doi:10.13154/tosc.v2016.i2.307-337.