Wei, Yongzhuang, et al. “Generalized Nonlinear Invariant Attack and a New Design Criterion for Round Constants”. IACR Transactions on Symmetric Cryptology, vol. 2018, no. 4, Dec. 2018, pp. 62-79, https://doi.org/10.13154/tosc.v2018.i4.62-79.