Saha, Dhiman, et al. “SymSum: Symmetric-Sum Distinguishers Against Round Reduced SHA3”. IACR Transactions on Symmetric Cryptology, vol. 2017, no. 1, Mar. 2017, pp. 240-58, https://doi.org/10.13154/tosc.v2017.i1.240-258.