J. Erlacher, F. Mendel, and M. Eichlseder, “Bounds for the Security of Ascon against Differential and Linear Cryptanalysis”, ToSC, vol. 2022, no. 1, pp. 64–87, Mar. 2022.