“Grøstl Distinguishing Attack: A New Rebound Attack of an AES-like Permutation”, ToSC, vol. 2017, no. 3, pp. 1–23, Sep. 2017, doi: 10.13154/tosc.v2017.i3.1-23.