“Meet-in-the-Middle Attacks on Classes of Contracting and Expanding Feistel Constructions”. IACR Transactions on Symmetric Cryptology, vol. 2016, no. 2, Feb. 2017, pp. 307-3, https://doi.org/10.13154/tosc.v2016.i2.307-337.