“SymSum: Symmetric-Sum Distinguishers Against Round Reduced SHA3” (2017) IACR Transactions on Symmetric Cryptology, 2017(1), pp. 240–258. doi:10.13154/tosc.v2017.i1.240-258.