Chaigneau, Colin, and Henri Gilbert. “Is AEZ v4.1 Sufficiently Resilient Against Key-Recovery Attacks?”. IACR Transactions on Symmetric Cryptology, vol. 2016, no. 1, Dec. 2016, pp. 114-33, https://doi.org/10.13154/tosc.v2016.i1.114-133.