M. Kaplan, G. Leurent, A. Leverrier, and M. Naya-Plasencia, “Quantum Differential and Linear Cryptanalysis”, ToSC, vol. 2016, no. 1, pp. 71–94, Dec. 2016.