“Quantum Differential and Linear Cryptanalysis”. IACR Transactions on Symmetric Cryptology, vol. 2016, no. 1, Dec. 2016, pp. 71-94, https://doi.org/10.13154/tosc.v2016.i1.71-94.