“Key-Recovery Attacks on Full Kravatte” (2018) IACR Transactions on Symmetric Cryptology, 2018(1), pp. 5–28. doi:10.13154/tosc.v2018.i1.5-28.