“Zero-Correlation Attacks on Tweakable Block Ciphers with Linear Tweakey Expansion” (2019) IACR Transactions on Symmetric Cryptology, 2019(1), pp. 192–235. doi:10.13154/tosc.v2019.i1.192-235.