V. Cauchois, C. Gomez, and R. Lercier, “Grøstl Distinguishing Attack: A New Rebound Attack of an AES-like Permutation”, ToSC, vol. 2017, no. 3, pp. 1–23, Sep. 2017.