“New techniques for trail bounds and application to differential trails in Keccak” (2017) IACR Transactions on Symmetric Cryptology, 2017(1), pp. 329–357. doi:10.13154/tosc.v2017.i1.329-357.