“Cryptanalysis of Low-Data Instances of Full LowMCv2” (2018) IACR Transactions on Symmetric Cryptology, 2018(3), pp. 163–181. doi:10.13154/tosc.v2018.i3.163-181.