O. Dunkelman and S. Huang, “Reconstructing an S-box from its Difference Distribution Table”, ToSC, vol. 2019, no. 2, pp. 193–217, Jun. 2019.