“Grøstl Distinguishing Attack: A New Rebound Attack of an AES-like Permutation” (2017) IACR Transactions on Symmetric Cryptology, 2017(3), pp. 1–23. doi:10.13154/tosc.v2017.i3.1-23.