Chaigneau, Colin, et al. “Key-Recovery Attacks on Full Kravatte”. IACR Transactions on Symmetric Cryptology, vol. 2018, no. 1, Mar. 2018, pp. 5-28, https://doi.org/10.13154/tosc.v2018.i1.5-28.