“Differential-Linear Cryptanalysis of Reduced Round ChaCha”. IACR Transactions on Symmetric Cryptology, vol. 2024, no. 2, June 2024, pp. 166-89, https://doi.org/10.46586/tosc.v2024.i2.166-189.