Dunkelman, Orr, and Senyang Huang. “Reconstructing an S-Box from Its Difference Distribution Table”. IACR Transactions on Symmetric Cryptology, vol. 2019, no. 2, June 2019, pp. 193-17, https://doi.org/10.13154/tosc.v2019.i2.193-217.