[1]
L. Grassi, D. Khovratovich, S. Rønjom, and M. Schofnegger, “The Legendre Symbol and the Modulo-2 Operator in Symmetric Schemes over Fnp: Preimage Attack on Full Grendel”, ToSC, vol. 2022, no. 1, pp. 5–37, Mar. 2022.