Farshim, Pooya, et al. “Security of Symmetric Primitives under Incorrect Usage of Keys”. IACR Transactions on Symmetric Cryptology, vol. 2017, no. 1, Mar. 2017, pp. 449-73, https://doi.org/10.13154/tosc.v2017.i1.449-473.